Method and system for migratable composed per-LCS secure enclaves

A method for managing a logically composed system (LCS), comprising:

• sending a request to a microvisor kernel of a microvisor to provision an LCS on a first information handling system (IHS), wherein the request comprises at least a configuration template (CT);
• sending a second request to the microvisor kernel to verify that an enclave with a virtual trusted platform module (vTPM) is ready to communicate with the LCS;
• initiating, based successfully verifying, provisioning of the LCS based on the CT, wherein the provisioning of the LCS comprises at least an initiation of a guest basic input/output system (BIOS) of the LCS;
• receiving a notification, from the microvisor kernel, specifying that the LCS has been provisioned;
• after the notification has been received:
• receiving a public key from the enclave with the vTPM, wherein the public key is generated by the enclave with the vTPM using a data chunk from an LCS kernel of the LCS;
• upon receiving the public key, encrypting the public key using a wrap key associated with the LCS to generate a wrapped public key;
• storing the wrapped public key in a storage device;
• after storing the wrapped public key in the storage device:
• making a first determination that the LCS is not terminated by a user of the first IHS;
• making, based on the first determination, a second determination that the enclave with the vTPM is terminated;
• deploying, based on the second determination, a second enclave with a second vTPM to the first IHS;
• and
• initiating a display notification of an administrator about the deploying using a graphical user interface (GUI).

A method for managing a logically composed system (LCS), comprising:

• sending a request to a microvisor kernel of a microvisor to provision an LCS on a first information handling system (IHS), wherein the request comprises at least a configuration template (CT);
• sending a second request to the microvisor kernel to verify that an enclave with a virtual trusted platform module (vTPM) is ready to communicate with the LCS;
• initiating, based successfully verifying, provisioning of the LCS based on the CT, wherein the provisioning of the LCS comprises at least an initiation of a guest basic input/output system (BIOS) of the LCS;
• receiving a notification, from the microvisor kernel, specifying that the LCS has been provisioned;
• after the notification has been received:
• sending a second notification to a user of the first IHS using a graphical user interface (GUI), wherein the second notification specifies a predetermined expiry date of the enclave with the vTPM on the first IHS.