Back to results
US 12,615,245 B2Granted
Systems and methods to orchestrate trusted enrollment
AssigneeDell Products L.P.
InventorsChooi Peng Low, Michael Phillips
Life of this patent
Estimating the term…
Abstract
Systems and methods are provided that may be implemented to orchestrate trusted enrollment of an endpoint client information handling system by deploying a signed payload of an enrollment package to the endpoint client system, and by using a client software agent executing on the endpoint client system to first verify the distribution chain and/or signature of the deployed enrollment package before proceeding to use other information contained in the enrollment package to contact a registration server to enroll the endpoint client system.
Claims15
A method, comprising:
- receiving an enrollment request in a server from across one or more networks coupled to the server, the enrollment request including enrollment information including an identity of an endpoint client system, a designated network location of a remote registration server, an email domain of an originator of the enrollment request and an email domain of the endpoint client system;
- and in response to the enrollment request:
- authenticating the email domain of the originator of the enrollment request;
- comparing the email domain of the endpoint client system to the authenticated email domain of the originator of the enrollment request;
- and
- then only performing the following if the email domain of the endpoint client system is the same as the authenticated email domain of the originator of the enrollment request:
- provisioning an enrollment package having a payload comprising at least a portion of the enrollment information that comprises the identity of the endpoint client system and the designated network location of the remote registration server,
- signing the enrollment package, and
- deploying the signed enrollment package across at least one of the one or more networks directly or through an intermediary system to the endpoint client system.
6 more elements
A system, comprising:
- a server information handling system comprising at least one programmable integrated circuit programmed to:
- receive an enrollment request from across one or more networks, the enrollment request including enrollment information including an identity of an endpoint client system, a designated network location of a remote registration server, an email domain of an originator of the enrollment request and an email domain of the endpoint client system, and in response to the enrollment request:
- authenticate the email domain of the originator of the enrollment request;
- compare the email domain of the endpoint client system to the authenticated email domain of the originator of the enrollment request;
- and
- then only perform the following if the email domain of the endpoint client system is the same as the authenticated email domain of the originator of the enrollment request:
- provision an enrollment package having a payload comprising at least a portion of the enrollment information that comprises the identity of the endpoint client system and the designated network location of the remote registration server,
- sign the enrollment package, and
- deploy the signed enrollment package across at least one of the one or more networks directly or through an intermediary system to the endpoint client system.
6 more elements
Dependencies are inferred from the claim text.