Systems and methods to build a trusted hypertext transfer protocol secure session on a limited pre-boot basic input/output system environment

A method, comprising:

• downloading, by a basic input/output system (BIOS) stored in a secure read-only region of a flash storage of the information handling system and executable by a processor of the information handling system, first signed certification authority (CA) information from a first server based on a first target location stored at a secure read-only region of the flash storage via a network;
• authenticating, by the BIOS, the first signed CA information based on a first public key stored at the secure read-only region of the flash storage;
• and
• when the first signed CA information is authenticated:
• downloading, by the BIOS, a first root CA chain from the first server;
• authenticating, by the BIOS, the first root CA chain from the first server based on a first root CA chain of the authenticated first signed CA information;
• and
• when the first root CA chain from the first server is authenticated, establishing a first secure encrypted transport layer security (TLS) session with the first server based on one or more certificates of the first root CA chain from the first server.