Fast identity online (FIDO) device onboarding (FDO) protocol computing device hardware attestation system

An Information Handling System (IHS), comprising:

• a processing system;
• and
• a memory system that is coupled to the processing system and that includes instructions that, when executed by the processing system, cause the processing system to provide a voucher management engine that is configured to:
• receive, from a computing device manufacturer system:
• an ownership voucher having first ownership transfer data including a voucher management system public key that has been signed by a computing device manufacturer system private key in order to transfer ownership of a computing device from the computing device manufacturer system to the voucher management system;
• and
• a hardware attestation certificate for the computing device that identifies a hardware inventory of the computing device and that is configured to verify that the computing device has not been altered subsequent to its manufacture;
• associate the ownership voucher and the hardware attestation certificate with the computing device in a voucher management database;
• and
• determine that the ownership of the computing device should be transferred to the end user system and, in response:
• automatically generate, in response to determining that ownership of the computing device should be transferred to the end user system, second ownership transfer data by signing an end user system public key with a voucher management system private key;
• provide the second ownership transfer data in the ownership voucher in order to transfer ownership of the computing device from the voucher management system to the end user system;
• and
• provide the ownership voucher and the hardware attestation certificate to the end user system.

A method for Fast IDentity Online (FIDO) Device Onboarding (FDO) protocol computing device hardware attestation, comprising:

• receiving, by a voucher management system from a computing device manufacturer system:
• an ownership voucher having first ownership transfer data including a voucher management system public key that has been signed by a computing device manufacturer system private key in order to transfer ownership of a computing device from the computing device manufacturer system to the voucher management system;
• and
• a hardware attestation certificate for the computing device that identifies a hardware inventory of the computing device and that is configured to verify that the computing device has not been altered subsequent to its manufacture;
• associating, by the voucher management system, the ownership voucher and the hardware attestation certificate with the computing device in a voucher management database;
• and
• determining, by the voucher management system, that the ownership of the computing device should be transferred to the end user system and, in response:
• automatically generating, by the voucher management system in response to determining that ownership of the computing device should be transferred to the end user system, second ownership transfer data by signing an end user system public key with a voucher management system private key;
• providing, by the voucher management system, the second ownership transfer data in the ownership voucher in order to transfer ownership of the computing device from the voucher management system to the end user system;
• and
• providing, by the voucher management system, the ownership voucher and the hardware attestation certificate to the end user system.