Systems and methods for transfer of workspace orchestration

An Information Handling System (IHS), the IHS comprising:

• a processor;
• a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the processor to operate a workspace on the IHS;
• and
• a TPM (Trusted Platform Module) having program instructions stored thereon that, upon execution, cause the TPM to:
• establish an authorization policy that is only modifiable based on information provided by an arbiter of a remote workspace orchestration service, wherein the authorization policy specifies authorized administrators of the workspace;
• modify the authorization policy to specify the arbiter and a first remote orchestrator service of the remote workspace orchestration n service as authorized administrators of the workspace;
• allow administration of the workspace by the first remote orchestrator service based on credentials provided by the first remote orchestrator service that validate it as one of the authorized administrators specified by the authorization policy;
• receive notification of a transfer of orchestration of the workspace to a second remote orchestrator service of the remote workspace orchestration service;
• modify the authorization policy to specify the arbiter and the second remote orchestrator service as authorized administrators of the workspace;
• and
• allow administration of the workspace by the second remote orchestrator service based on credentials provided by the second remote orchestrator service that validate it as one of the authorized administrators specified by the authorization policy.

A system comprising:

• an IHS (Information Handling System) comprising:
• a processor;
• and
• a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the processor to operate a workspace on the IHS;
• a workspace orchestration service that supports workspaces operating on the IHS (Information Handling System), wherein the workspace orchestration service comprises:
• a first remote orchestrator service;
• a second remote orchestrator service;
• and
• an arbiter configured to:
• establish an authorization policy on the IHS that is only modifiable based on information provided by the arbiter, wherein the authorization policy specifies authorized administrators of the workspace;
• modify the authorization policy to specify the arbiter and the first remote orchestrator service as authorized administrators of the workspace, wherein based on the modification of the authorization policy, administration of the workspace by the first remote orchestrator service is allowed, wherein the first remote orchestrator service provides credentials that validate it as one of the authorized administrators specified by the authorization policy;
• receive notification of a transfer of orchestration of the workspace to a second remote orchestrator service;
• and
• modify the authorization policy to specify the arbiter and the second remote orchestrator service as authorized administrators of the workspace, wherein based on the modification of the authorization policy, administration of the workspace by the second remote orchestrator service is allowed, wherein the second remote orchestrator service provides credentials that validate it as one of the authorized administrators specified by the authorization policy.