Managing trusted platform module (TPM) replacement at an information handling system

A computing environment, including:

• a server management information handling system comprising a processor having access to memory media storing instructions executable by the processor to perform operations;
• a client information handling system comprising a processor having access to memory media storing instructions executable by the processor to perform operations, comprising:
• registering the client IHS to a management server information handling system (IHS);
• encrypting, at a first time, a storage device at the client IHS utilizing a first TPM and first keys;
• providing, to the management server IHS, the first keys;
• wherein the management server IHS is configured to perform operations:
• storing the first keys at a database;
• wherein the client IHS is configured to perform operations:
• detecting, at a second time after the first time, replacement of the first TPM with a second TPM at the client IHS, and in response:
• requesting, to the management server IHS, the first keys;
• receiving, from the management server IHS, the first keys;
• decrypting the storage device at the client IHS utilizing the second TPM and the first keys;
• encrypting the storage device at the client IHS utilizing the second TPM and second keys differing from the first keys;
• providing, to the management server IHS, the second keys;
• and
• wherein the management server IHS is configured to perform operations:
• storing the second keys at the database;
• wherein the client IHS is configured to perform operations:
• storing, at the first TPM, additional keys and certifications;
• providing, to the management server IHS, the additional keys and the certifications;
• and
• wherein the management server IHS is configured to perform operations:
• storing the additional keys and the certifications at the database
• wherein the client IHS is configured to perform operations:
• identifying an adjustment of the additional keys;
• and
• periodically syncing the additional keys and the certifications with the management server IHS, including the adjustment of the additional keys.

A non-transitory computer-readable medium storing software comprising instructions executable by one or more computers which, upon such execution, cause the one or more computers to perform operations comprising:

• registering the client IHS to a management server information handling system (IHS);
• encrypting, by the client IHS at a first time, a storage device at the client IHS utilizing a first TPM and first keys;
• storing, at the first TPM, additional keys and certifications;
• providing, by the client IHS and to the management server IHS, the additional keys and the certifications;
• storing, by the management server IHS, the additional keys and the certifications at the database
• identifying, by the client IHS, an adjustment of the additional keys;
• periodically syncing the additional keys and the certifications with the management server IHS, including the adjustment of the additional keys;
• providing, by the client IHS and to the management server IHS, the first keys;
• storing, by the management server IHS, the first keys at a database;
• detecting, at a second time after the first time, replacement of the first TPM with a second TPM at the client IHS, and in response:
• requesting, by the client IHS and to the management server IHS, the first keys;
• receiving, from the management server IHS and by the client IHS, the first keys;
• decrypting, by the client IHS, the storage device at the client IHS utilizing the second TPM and the first keys;
• encrypting, by the client IHS, the storage device at the client IHS utilizing the second TPM and second keys differing from the first keys;
• providing, by the client IHS and to the management server IHS, the second keys;
• and
• storing, by the management server IHS, the second keys at the database.