Secure authentication method for performing a host operation using a delegated authorization mechanism

An information handling system, comprising:

• a host operating system agent configured to:
• generate an authentication token for a first user subsequent to an authentication of a digital certificate associated with a service processor;
• and
• send the authentication token to the service processor;
• the service processor configured to:
• receive a host operation request for the information handling system from a second user, wherein the host operation request is sent without a first user credential that is associated with the first user;
• send the host operation request to the host operating system agent for the authentication of the digital certificate that is included with the host operation request, wherein the digital certificate is associated with the service processor, and wherein the authentication token is associated with the first user credential;
• receive the authentication token from the host operating system agent subsequent to the authentication of the digital certificate associated with the service processor;
• and
• send a response to the host operation request with the authentication token to the second user.

A non-transitory computer-readable medium including code that when executed performs a method, the method comprising:

• receiving a host operation request for an information handling system, wherein the host operation request is sent without a host operating system user credential, wherein the host operation request is sent from a user from a system management application monitoring the information handling system, and the host operation request includes user credentials associated with the system management application;
• sending the host operation request to a host operating system agent for authentication, wherein the host operation request includes a digital certificate associated with a service processor, and wherein the authentication is based on the host operating system user credential preconfigured for performing the host operation request;
• receiving an authentication token from the host operating system agent subsequent to the authentication of the digital certificate;
• and
• sending the authentication token to the user.