Access control system

A system, comprising:

• one or more processors;
• and
• memory that stores computer-executable instructions that, if executed, cause the system to:
• receive a digital certificate from a computer system;
• determine that the digital certificate is valid;
• determine that a characteristic of the computer system matches a characteristic of the computer system described in the digital certificate;
• determine that a digital signature generated with a cryptographic key of a trusted platform module is valid;
• generate a set of credentials that enable access to a service in accordance with a security role associated with the digital certificate;
• and
• provide, to the computer system, the set of credentials.

A non-transitory computer-readable storage medium storing executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least:

• provide, to a server, a characteristic of the computer system and a digital signature of executable instructions associated with an agent hosted by the computer system;
• receive a set of credentials from a server, the set of credentials granting access to a service based on a security role associated with the digital signature;
• provide the set of credentials;
• and
• provide a new set of credentials based at least in part on the set of credentials being unusable.