Technologies for secure device configuration and management

A method for secure device configuration, the method comprising:

• providing, by a trusted agent of a computing device, a trusted agent attestation report to a trusted firmware component of the computing device;
• performing, by the trusted agent, an authenticated key exchange protocol with a trusted execution environment of the computing device in response to providing the trusted agent attestation report;
• authenticating, by the trusted agent, an input/output (I/O) device of the computing device;
• performing, by the trusted agent, an authenticated key exchange protocol with the I/O device in response to authenticating the I/O device;
• verifying, by the trusted agent, a device configuration report in response to performing the authenticated key exchange protocol, wherein the device configuration report is indicative of configuration registers of the I/O device;
• and
• sending, by the trusted agent, the device configuration report to the trusted execution environment in response to verifying the device configuration report.

At least one computer-readable medium having stored thereon instructions which, when executed, cause a computing device to facilitate operations comprising:

• providing, by a trusted agent of the computing device, a trusted agent attestation report to a trusted firmware component of the computing device;
• performing, by the trusted agent, an authenticated key exchange protocol with a trusted execution environment of the computing device in response to providing the trusted agent attestation report;
• authenticating, by the trusted agent, an input/output (I/O) device of the computing device;
• performing, by the trusted agent, an authenticated key exchange protocol with the I/O device in response to authenticating the I/O device;
• verifying, by the trusted agent, a device configuration report in response to performing the authenticated key exchange protocol, wherein the device configuration report is indicative of configuration registers of the I/O device;
• and
• sending, by the trusted agent, the device configuration report to the trusted execution environment in response to verifying the device configuration report.