Provisioning trusted execution environment based on chain of trust including platform

A method performed by a first trusted execution environment using a processing system of a processor-based system, the method comprising:

• establishing a chain of trust from a second trusted execution environment to a platform based at least on receipt of measurements of the second trusted execution environment, which are signed with a platform signing key of the platform, from the platform,
• the measurements indicating attributes of the second trusted execution environment, which is hosted by a distributed computing system that hosts the first trusted execution environment;
• and
• provisioning the second trusted execution environment with information in absence of a secure channel between the first trusted execution environment and the second trusted execution environment to customize the second trusted execution environment with the information based at least on the chain of trust in response to the second trusted execution environment being launched from a template, which is associated with an operating system that is configured to execute on the platform.

A computer program product comprising a computer-readable storage medium having instructions recorded thereon for enabling a first trusted execution environment to perform steps using a processing system of a processor-based system, the steps comprising:

• establishing, by the first trusted execution environment, a chain of trust from a second trusted execution environment to a platform based at least on receipt of measurements of the second trusted execution environment, which are signed with a platform signing key of the platform, from the platform,
• the measurements indicating attributes of the second trusted execution environment, which is hosted by a distributed computing system that hosts the first trusted execution environment;
• and
• provisioning, by the first trusted execution environment, the second trusted execution environment with information in absence of a secure channel between the first trusted execution environment and the second trusted execution environment to customize the second trusted execution environment with the information based at least on the chain of trust in response to the second trusted execution environment being launched from a template, which is associated with an operating system that is configured to execute on the platform.