System and method for establishing perpetual trust among platform domains

A method comprising:

• generating a first shared secret for a boot session of an information handling system;
• determining if a second shared secret existed for a prior boot session of the information handling system;
• when the second shared secret existed for the prior boot session:
• encrypting the first shared secret with the second shared secret;
• and
• communicating the first shared secret encrypted by the second shared secret from a first information handling resource to a second information handling resource;
• when the second shared secret did not exist for the prior boot session, communicating the first shared secret unencrypted from the first information handling resource to the second information handling resource;
• at the second information handling resource:
• receiving the first shared secret;
• and
• when the second shared secret existed for the prior boot session:
• decrypting the first shared secret with the second shared secret;
• and
• securely communicating between the first information handling resource and the second information handling resource using the first shared secret for encryption and decryption of communications,
• wherein the first information handling resource and the second information handling resource are included in the information handling system and are selected from:
• a basic input/output system (BIOS) and a service processor.

Non-transitory computer readable memory media accessible to a first processor, the memory media storing instructions executable by the first processor to:

• generate a first shared secret for a boot session of an information handling system;
• determine if a second shared secret existed for a prior boot session of the information handling system;
• when the second shared secret existed for the prior boot session:
• encrypt the first shared secret with the second shared secret;
• and
• communicate the first shared secret encrypted by the second shared secret to a basic input/output system (BIOS);
• when the second shared secret did not exist for the prior boot session, communicate the first shared secret unencrypted to the BIOS;
• and
• securely communicate with the BIOS using the first shared secret for encryption and decryption of communications,
• wherein the first processor and the BIOS are included in the information handling system.