Credential Translation

In an Information Handling System (IHS) having an off-host authentication processing system segregated from a host processor and a host memory, the off-host authentication processing system having an off-host processor and an off-host memory, a method performed by the off-host authentication processing system, the method comprising:

• receiving a certificate from a web-access management server;
• storing the certificate in the off-host memory;
• requesting that a user of the IHS provide an authentication factor to be associated with the certificate such that the certificate is only retrievable from the off-host memory upon presentation of the authentication factor to the off-host processor;
• in response to the user attempting to access a web resource, receiving, from the web-access management server, a request for the certificate;
• and
• in response to the user having provided the authentication factor to the off-host processor in a transaction prior to the attempt to access the web resource, transmitting the certificate from the off-host memory to the web-access management server.

A storage device having program instructions stored thereon that, upon execution by an Information Handling System (IHS), cause the IHS to:

• receive a certificate from a web-access management server at an off-host authentication processing system having an off-host processor and an off-host memory segregated from a host processor and host memory within the IHS;
• store the certificate in the off-host memory;
• request that a user of the IHS provide an authentication factor to be associated with the certificate such that the certificate is only retrievable from the off-host memory upon presentation of the authentication factor to the off-host processor;
• receive, from the web-access management server, a request for the certificate in response to the user attempting to access a web resource;
• and
• transmit the certificate from the off-host memory to the web-access management server in response to the user having provided the authentication factor to the off-host processor upon login into the IHS and prior to the attempt to access the web resource.