Verifying a computing device after transport

A method for manufacturing a computing device, the method comprising:

• installing a disk image on the computing device;
• obtaining a set of security artifacts from a trusted platform module (TPM) of the computing device, the set of security artifacts comprising an endorsement key (EK) public key and platform configuration register (PCR) values;
• and
• sending the security artifacts obtained to a cloud storage location via a secure channel.

A computing device authentication system, comprising:

• a disk imaging system configured to install a disk image on a computing device during manufacturing of the computing device and to extract a first set of security artifacts from a trusted platform module (TPM) residing on the computing device;
• a monitoring service configured to obtain the first set of security artifacts and to send the first set of security artifacts to a secure cloud storage location via a secure channel;
• and
• an authentication system configured to
• establish a secure connection with the computing device,
• receive, from the computing device, a second set of security artifacts for the computing device, the second set of security artifacts comprising an endorsement key (EK) public key and platform configuration register (PCR) values,
• retrieve, from the secure cloud storage location, the first set of security artifacts for the computing device,
• when the second set of security artifacts matches the first set of security artifacts, verify the computing device as trusted and permit communication between the computing device and a secured computing environment, and
• when the second set of security artifacts does not match the first set of security artifacts, not verify the computing device as trusted and not permit communication between the computing device and the secured computing environment.