Device locking key management system

An Information Handling System (IHS), comprising:

• at least one processing system;
• and
• at least one memory system that is coupled to the at least one processing system and that includes instructions that, when executed by the at least one processing system, cause the at least one processing system to provide at least one local managed device locking subsystem that is configured to:
• retrieve, through a network from a remote management system and based on a managed device being configured for use in initializing a managed system, a managed device locking key that is configured to unlock the managed device;
• encrypt the managed device locking key to provide an encrypted managed device locking key;
• store the encrypted managed device locking key in a managed device locking key storage;
• retrieve, from the managed device locking key storage in association with an initialization of the managed system, the encrypted managed device locking key;
• decrypt the encrypted managed device locking key to provide a decrypted managed device locking key;
• and
• unlock, using the decrypted managed device locking key, the managed device for use in initializing the managed system.

A method for managing keys, comprising:

• retrieving, by at least one local managed device locking subsystem that is included in a managed system through a network from a remote management system, a managed device locking key that is configured to unlock a managed device that is included in the managed system and that is configured for use in initializing the managed system;
• encrypting, by the at least one managed device locking subsystem, the managed device locking key to provide an encrypted managed device locking key;
• storing, by the at least one managed device locking subsystem, the encrypted managed device locking key in a managed device locking key storage that is included in the managed system;
• retrieving, by the at least one managed device locking subsystem from the managed device locking key storage in association with an initialization of the managed system, the encrypted managed device locking key;
• decrypting, by the at least one managed device locking subsystem, the encrypted managed device locking key to provide a decrypted managed device locking key;
• and
• unlocking, by the at least one managed device locking subsystem using the decrypted managed device locking key, the managed device for use in initializing the managed system.