Secure booting of information handling systems based on validated hardware

An IHS (Information Handling System) comprising:

• a plurality of hardware components comprising:
• one or more processors;
• and
• one or more memory devices coupled to the processors, the memory devices storing computer-readable instructions that, upon execution by the processors, cause a factory provisioning process to:
• generate, by a remote access controller of the IHS, a first certificate signing request (CSR) that identifies an inventory of factory-installed hardware components of the first IHS;
• transmit, by the remote access controller of the IHS, the first CSR to a factory certificate authority;
• upload an inventory certificate generated by the factory certificate authority from the CSR to the IHS;
• and
• and, upon delivery of the IHS, further cause a validation process of the IHS to:
• delay booting of an operating system of the IHS until the plurality of hardware components of the IHS are validated;
• compare the plurality of hardware components against the inventory from the inventory certificate in order to validate the plurality of hardware components of the IHS as the same hardware components installed during factory assembly of the IHS;
• and
• when the comparison validates the plurality of hardware components of the IHS, allow further booting of the operating system of the IHS.

A non-transitory computer-readable storage device having instructions stored thereon for validating secure assembly and delivery of an IHS (Information Handling System), wherein execution of the instructions by one or more processors of the IHS causes a factory provisioning process of the IHS to:

• generate, by a remote access controller of the IHS, a first certificate signing request (CSR) that identifies an inventory of factory-installed hardware components of the first IHS;
• transmit, by the remote access controller of the IHS, the first CSR to a factory certificate authority,
• upload an inventory certificate generated by the factory certificate authority from the CSR to the IHS;
• and
• and, upon delivery of the IHS, further cause a validation process of the IHS to:
• delay booting of an operating system of the IHS until detected hardware components of the IHS are validated;
• retrieve an inventory certificate uploaded to the IHS during factory provisioning of the IHS, wherein the inventory certificate includes an inventory identifying a plurality of hardware components installed during factory assembly of the IHS;
• collect an inventory of the detected hardware components of the IHS;
• compare the collected inventory against the inventory from the inventory certificate in order to validate the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS;
• and
• when the comparison validates the detected hardware components of the IHS, allow booting of the operating system of the IHS.