Provisioning with secure software supply chain delivery

An apparatus comprising:

• a processor;
• and
• non-transitory computer readable storage media storing code, the code being executable by the processor to perform operations comprising:
• storing a vendor secret on a computing device while the computing device is located at a manufacturer of the computing device;
• querying, by a vendor cloud provisioner, the manufacturer for a serial number of the computing device and a computing device secret;
• binding, in a provisioning data structure external to the computing device, the computing device secret and the serial number;
• correlating, in the provisioning data structure, a customer and provisioning instructions of the customer with the serial number of the computing device;
• receiving, from the computing device located at a location where the computing device is to be provisioned, a request for the provisioning instructions;
• exchanging credentials between the computing device and the vendor cloud provisioner using the computing device secret and the vendor secret;
• and
• transmitting the provisioning instructions to the computing device in response a successful exchange of credentials between the computing device and the vendor cloud provisioner and/or receiving the serial number from the computing device.

A program product comprising a non-transitory computer readable storage medium storing code, the code being configured to be executable by a processor to perform operations comprising:

• storing a vendor secret on a computing device while the computing device is located at a manufacturer of the computing device;
• querying, by a vendor cloud provisioner, the manufacturer for a serial number of the computing device and a computing device secret;
• binding, in a provisioning data structure external to the computing device, the computing device secret and the serial number;
• correlating, at the vendor cloud provisioner, a customer and provisioning instructions of the customer with the serial number of the computing device;
• receiving, from the computing device located at a location where the computing device is to be provisioned, a request for the provisioning instructions;
• exchanging credentials between the computing device and the vendor cloud provisioner using the computing device secret and the vendor secret;
• and
• transmitting the provisioning instructions to the computing device in response a successful exchange of credentials between the computing device and the vendor cloud provisioner and/or receiving the serial number from the computing device.