HTTPS boot to provide decryption key

At least one computer readable storage medium (CRSM) that is not a transitory signal, the computer readable storage medium comprising instructions executable by at least one processor to:

• store a key at a storage area of at least one server accessible via Internet communication;
• use the key to encrypt local storage of a client device different from the at least one server;
• use the at least one server to facilitate booting of the client device and subsequent installation of a guest operating system at the client device based on Internet communication between the at least one server and the client device, the booting facilitated using one or more files provided from the at least one server and stored in random access memory (RAM) of the client device both while booting is facilitated via the at least one server and while the local storage is encrypted, the one or more files comprising one or more of:
• an extensible firmware interface (EFI) file, an IMG file;
• while booting is facilitated via the at least one server and based on booting the client device using the EFI file and/or IMG file stored in the RAM, authenticate a user of the client device based on input to the client device;
• while booting is facilitated via the at least one server and responsive to authentication of the user, use the EFI file and/or IMG file to verify integrity of the client device;
• while booting is facilitated via the at least one server and responsive to verification of the integrity of the client device failing, decline to transmit the key to the client device;
• and
• while booting is facilitated via the at least one server and responsive to verification of the integrity of the client device being successful, transmit the key to the client device.

A method, comprising:

• receiving a first boot command to boot an operating system of a device;
• responsive to receiving the first boot command, transmitting a request to boot the device using Internet communication and using one or more boot files executed by at least one server;
• facilitating booting of the device using hypertext transfer protocol secure (HTTPS) communication to boot the device using Internet communication and using the one or more boot files executed by the at least one server;
• while the device is booted via the at least one server, receiving input of authentication credentials;
• while the device is booted via the at least one server, transmitting the authentication credentials to the at least one server;
• while the device is booted via the at least one server, communicating with the at least one server to verify an identity of the device;
• while the device is booted via the at least one server, communicating with the at least one server to download a decryption key and use the decryption key to decrypt at least one persistent storage area of the device;
• and
• responsive to receiving a second boot command subsequent to the first boot command, booting the operating system of the device from local storage of the device rather than via the at least one server.