System and method for authentication in a public cloud

A computing device configured to:

• transmit a first token and a second token from a cloud service manager to a public cloud controller;
• initialize a public cloud manger in response to receipt of the first token and the second token, and generate a cloud certificate;
• transmit the cloud certificate and the second token from the public cloud manager to the cloud service manager;
• and
• establish a trusted connection between the public cloud controller and the management plane in response to receipt of the cloud certificate and the second token by the management plane.

A non-transitory computer-readable storage medium containing instructions for controlling a computer processor to:

• transmit a first token and a second token from a cloud service manager to a public cloud controller;
• generating a cloud certificate from a public cloud manager in response to receipt of the first token and the second token;
• transmit the cloud certificate and the second token from the public cloud manager to cloud service manager;
• and
• establish a trusted connection between the public cloud controller and the management plane in response to receipt of the cloud certificate and the second token by the management plane.