Provisioning multiple platform root of trust entities of a hardware device using role-based identity certificates

An apparatus comprising:

• at least one processing device comprising a processor coupled to a memory;
• the at least one processing device being configured to implement the following steps:
• obtaining a designation of a given platform root of trust entity of a plurality of platform root of trust entities of a hardware device as a platform root of trust leader associated with a leader role;
• recording the leader role of the platform root of trust leader as a role attribute in an identity certificate associated with the platform root of trust leader;
• and
• providing the identity certificate to the hardware device during a provisioning of the hardware device, wherein the given platform root of trust entity assumes the leader role of the hardware device and initiates one or more security actions of the platform root of trust leader upon an initiation of the hardware device in response to the given platform root of trust entity parsing the leader role attribute of the identity certificate associated with the platform root of trust leader.

A non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device to perform the following steps:

• obtaining a designation of a given platform root of trust entity of a plurality of platform root of trust entities of a hardware device as a platform root of trust leader associated with a leader role;
• recording the leader role of the platform root of trust leader as a role attribute in an identity certificate associated with the platform root of trust leader;
• and
• providing the identity certificate to the hardware device during a provisioning of the hardware device, wherein the given platform root of trust entity assumes the leader role of the hardware device and initiates one or more security actions of the platform root of trust leader upon an initiation of the hardware device in response to the given platform root of trust entity parsing the leader role attribute of the identity certificate associated with the platform root of trust leader.