# US 12,216,764 B2 · Smart network interface controller certificate management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,216,764 B2 - Document ID: US12216764B2 - Status: Granted - Kind: B2 - Application number: 17/728,597 - Filed: 2022-04-25 - Published: 2023-10-26 - Granted: 2025-02-04 - Earliest claimed: 2022-04-25 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: Deepaganesh Paulraj; Akkiah Choudary Maddukuri - Web page: https://patentgrep.com/patent/US12216764B2 ## CPC - G06F 21/575: {Secure boot} - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - G06F 2009/45587: {Isolation or security of virtual machine instances} - G06F 2009/45595: {Network integration; Enabling network access in virtual machine instances} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract An information handling system may include a management controller configured to provide out-of-band management of the information handling system, and a network interface controller comprising a network interface controller storage resource. The management controller may be configured to: receive, from a centralized management platform, information regarding at least one signature associated with a network interface controller operating system (OS) configured to be executed by the network interface controller; and transmit the at least one signature to the network interface controller. The network interface controller may be configured to install the network interface OS to the network interface controller storage resource based on the at least one signature. ## Claims ### Claim 1 An information handling system comprising: a management controller configured to provide out-of-band management of the information handling system; and a network interface controller comprising a network interface controller storage resource; wherein the management controller is configured to: receive, from a centralized management platform, information regarding at least one signature associated with a network interface controller operating system (OS) configured to be executed by the network interface controller, wherein the at least one signature is a Secure Boot signature that is operable to allow the network interface controller to install and boot the network interface controller OS; receive, from the network interface controller, a Dynamic Host Configuration Protocol (DHCP) solicit message that includes a current network interface controller OS version and a hardware architecture identifier for the network interface controller; and transmit the at least one signature to the network interface controller based on the solicit message to automatically renew the Secure Boot signature via automatic certificate enrollment; wherein the network interface controller is configured to install the network interface controller OS to the network interface controller storage resource based on the at least one signature; and wherein the network interface controller is a SmartNIC. ### Claim 2 (depends on 1) The information handling system of claim 1, wherein the management controller is further configured to select the at least one signature based on characteristics of the network interface controller. ### Claim 3 (depends on 2) The information handling system of claim 2, wherein the characteristics comprise at least a vendor identifier and a hardware architecture identifier associated with the network interface controller. ### Claim 4 (depends on 1) The information handling system of claim 1, wherein the management controller is further configured to verify that the at least one signature is valid. ### Claim 5 A method comprising, in an information handling system including a management controller configured to provide out-of-band management of the information handling system and a network interface controller that includes a network interface controller storage resource: the management controller receiving, from a centralized management platform, information regarding at least one signature associated with a network interface controller operating system (OS) configured to be executed by the network interface controller, wherein the at least one signature is a Secure Boot signature that is operable to allow the network interface controller to install and boot the network interface controller OS; the management controller receiving, from the network interface controller, a Dynamic Host Configuration Protocol (DHCP) solicit message that includes a current network interface controller OS version and a hardware architecture identifier for the network interface controller; the management controller transmitting the at least one signature to the network interface controller based on the solicit message to automatically renew the Secure Boot signature via automatic certificate enrollment; and the network interface controller installing the network interface OS to the network interface controller storage resource based on the at least one signature; and wherein the network interface controller is a SmartNIC. ### Claim 6 (depends on 5) The method of claim 5, further comprising the management controller selecting the at least one signature based on characteristics of the network interface controller. ### Claim 7 (depends on 6) The method of claim 6, wherein the characteristics comprise at least a vendor identifier and a hardware architecture identifier associated with the network interface controller. ### Claim 8 (depends on 5) The method of claim 5, further comprising the management controller verifying that the at least one signature is valid. ### Claim 9 An article of manufacture comprising a non-transitory, computer-readable medium having instructions thereon that are executable by at least one processor of a management controller of an information handling system for: receiving, from a centralized management platform, information regarding at least one signature associated with a network interface controller operating system (OS) configured to be executed by the network interface controller, wherein the at least one signature is a Secure Boot signature that is operable to allow the network interface controller to install and boot the network interface controller OS; receiving, from the network interface controller, a Dynamic Host Configuration Protocol (DHCP) solicit message that includes a current network interface controller OS version and a hardware architecture identifier for the network interface controller; and transmitting the at least one signature to the network interface controller based on the solicit message to automatically renew the Secure Boot signature via automatic certificate enrollment; wherein the network interface controller is configured to install the network interface OS to a network interface controller storage resource thereof based on the at least one signature; and wherein the network interface controller is a SmartNIC. ### Claim 10 (depends on 9) The article of claim 9, wherein the instructions are further executable for selecting the at least one signature based on characteristics of the network interface controller. ### Claim 11 (depends on 10) The article of claim 10, wherein the characteristics comprise at least a vendor identifier and a hardware architecture identifier associated with the network interface controller. ### Claim 12 (depends on 9) The article of claim 9, wherein the instructions are further executable for: verifying that the at least one signature is valid.