Validated movement of hardware within an IHS cluster

A method for validating hardware detected by an IHS (Information Handling System) that is a member of a computing cluster, the method comprising:

• validating, by a validation process of the IHS, whether hardware detected by the IHS is factory-installed based on an inventory certificate that specifies components that were installed in the IHS during manufacture, wherein the validating the detected hardware is based at least in part on information retrieved from a root of trust that is validated as matching a root of trust identity specified in the inventory certificate;
• notifying, by a validation process of the IHS via a remote access controller that manages the IHS membership in the computing cluster, a cluster management console when the detected hardware is validated as factory-installed based on the inventory certificate, wherein the cluster management console is specified in the inventory certificate, and wherein the remote access controller is validated as matching a remote access controller identity specified in the inventory certificate;
• based on the notification of validated detected hardware from the IHS, identifying, by the cluster management console, a plurality of replaceable hardware components installed within IHSs that are members of the computing cluster;
• obtaining, by the cluster management console, a delta certificate that specifies replaceable hardware components authorized for operation by the IHS, wherein the delta certificate includes one or more of the plurality of replaceable hardware components that were previously installed within other IHSs that are members of the computing cluster;
• and
• transmitting the delta certificate from the cluster management console to the IHS.

An IHS (Information Handling System) that is a member of a computing cluster, the IHS comprising:

• one or more processors;
• one or more memory devices coupled to the processors, the memory devices storing computer-readable instructions that, upon execution by the processors, cause a validation process of the IHS to:
• validate whether hardware detected by the IHS is factory-installed based on an inventory certificate that specifies components that were installed in the IHS during manufacture, wherein the validating of the detected hardware is based at least in part on information retrieved from a root of trust specified in the inventory certificate;
• notify, via a remote access controller of the IHS that manages the IHS membership in the computing cluster, a cluster management console when the detected hardware is validated as factory-installed based on the inventory certificate, wherein the cluster management console is specified in the inventory certificate, wherein the remote access controller is validated as matching a remote access controller identity specified in the inventory certificate, and wherein, based on the notification of validated hardware from the IHS, the cluster management console identifies a plurality of replaceable hardware components installed within IHSs that are members of the computing cluster and obtains a delta certificate that specifies replaceable hardware components authorized for transfer to the IHS, the delta certificate including one or more replaceable hardware components previously installed within other IHSs that are members of the computing cluster;
• and
• receive the delta certificate from the cluster management console.