Communications System with Remote Security for Host Devices

A method of operating an electronic device, comprising:

• transmitting, via a communications interface with a server, a challenge request that includes a public endorsement key and an endorsement key certificate stored on a trusted platform module (TPM) in the electronic device;
• receiving, via the communications interface with the server, a challenge that includes an encrypted secret generated by the server based on the public endorsement key;
• decrypting, at the TPM, the encrypted secret to produce a decrypted secret;
• and
• transmitting, via the communications interface with the server, a request for a data payload, wherein the request for the data payload includes the decrypted secret.

A method of operating an electronic device, comprising:

• generating, using software stored on storage, a cryptographic fingerprint associated with the electronic device based on an endorsement certificate that is stored on a trusted platform module (TPM) separate from the storage;
• transmitting, via a communications interface with a server, the cryptographic fingerprint;
• receiving, via the communications interface with the server, a first cryptographic key generated by the server based on the cryptographic fingerprint;
• encrypting the storage using a second cryptographic key;
• encrypting the second cryptographic key using the first cryptographic key;
• and
• storing the encrypted second cryptographic key on the encrypted storage.