Cryptographic algorithm identity (CAI) certificate selection system and method

A Cryptographic Algorithm Identity (CAI) certificate selection method comprising:

• receiving, by a target Information Handling System (IHS), a Certificate Signing Request (CSR) from a server;
• signing, by the target IHS, the CSR with a first Cryptographic Algorithm Identity (CAI) key stored in the memory;
• sending, by the target IHS, the signed CSR to a server IHS;
• identifying, by the server IHS, a geographical region that is associated with the first CAI key;
• identifying, by the server IHS, an approved cryptographic algorithm that is approved for use in the identified region;
• sending, by the server IHS, a second CAI key associated with the identified approved cryptographic algorithm;
• receiving, by the target IHS, the second CAI key from the server;
• and
• performing, by the target IHS, a cryptographic operation using a cryptographic algorithm associated with the second CAI key.

A memory storage device having program instructions stored thereon that, upon execution by an Information Handling System (IHS), cause the IHS to:

• receive a Certificate Signing Request (CSR) from a server;
• sign the CSR with a first Cryptographic Algorithm Identity (CAI) key stored in the memory;
• send the signed CSR to the server, wherein the server is configured to identify a geographical region that is associated with the first CAI key, identify an approved cryptographic algorithm that is approved for use in the identified region, and send a second CAI key associated with the identified approved cryptographic algorithm;
• receive the second CAI key from the server;
• and
• perform a cryptographic operation using a cryptographic algorithm associated with the second CAI key.