# US 2026/0093786 A1 · Late-bound licensing of endpoint devices > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2026/0093786 A1 - Document ID: US20260093786A1 - Status: Published application - Kind: A1 - Application number: 18/899,308 - Filed: 2024-09-27 - Published: 2026-04-02 - Earliest claimed: 2024-09-27 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: BRADLEY K. GOODMAN; MAHESH BABU RAMAIAH - Web page: https://patentgrep.com/patent/US20260093786A1 ## CPC - G06F 21/1011: {to devices} - H04L 9/3247: {involving digital signatures} - H04L 9/3265: {using certificate chains, trees or paths; Hierarchical trust model} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Methods and systems for managing endpoint devices are disclosed. The endpoint devices may be managed by onboarding them. To onboard the endpoint devices, ownership vouchers may be used to cryptographically verify to which entities authority over the endpoint devices have been delegated. The ownership vouchers may also include licenses to be applied by the endpoint devices during the onboarding. The licenses may be applied during the onboarding with zero intervention by a current owner of the endpoint devices. ## Claims ### Claim 1 A method for managing endpoint devices, the method comprising: during an onboarding of an endpoint device of the endpoint devices: obtaining, by the endpoint device, an ownership voucher, the ownership voucher comprising a component license associated with a component of the endpoint device; validating, by the endpoint device and using the ownership voucher, that the component license is signed by a trusted entity associated with the endpoint device that delegated an ownership of the endpoint device to a current owner of the endpoint device; and applying, by the endpoint device and in response to validating that the component license is signed by the trusted entity, the component license to the component as part of completing the onboarding of the endpoint device. ### Claim 2 (depends on 1) The method of claim 1, wherein, prior to the onboarding being started and completed, the endpoint device is in a state that is unable to provide any computer-implemented services for the current owner. ### Claim 3 (depends on 2) The method of claim 2, wherein the state is a late-bounding state where the endpoint device, prior to the onboarding being started, is not provisioned with a host operating system (OS). ### Claim 4 (depends on 2) The method of claim 2, wherein the onboarding is part of a late bound zero-touch secure provisioning (ZTSP) process. ### Claim 5 (depends on 4) The method of claim 4, wherein the ownership voucher comprises a certificate that: comprises a license payload that contains the component license, comprises a delegation of the ownership of the endpoint device from the trusted entity to the current owner, and is cryptographically signed by the trusted entity. ### Claim 6 (depends on 5) The method of claim 5, wherein the certificate is part of a certificate chain comprising one or more instances of the certificate, the certificate chain delegates authority from a root of trust of the endpoint device to the current owner, the root of trust being associated with the trusted entity, and the certificate chain being cryptographically verifiable back to the root of trust using respective public private key pairs of the current owner and the trusted entity, and validating that the component license is associated with a trusted entity comprises using the respective public private key pairs of the current owner and the trusted entity to cryptographically validate the certificate chain back to the root of trust. ### Claim 7 (depends on 1) The method of claim 1, wherein the component license comprises an activation key or a license file, and applying the component license to the component comprises: using, by the endpoint device and without any intervention by the current owner, the activation key or the license file from the component license to activate one or more functions of the component. ### Claim 8 A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for managing endpoint devices, the operations comprising: during an onboarding of an endpoint device of the endpoint devices: obtaining, by the endpoint device, an ownership voucher, the ownership voucher comprising a component license associated with a component of the endpoint device; validating, by the endpoint device and using the ownership voucher, that the component license is signed by a trusted entity associated with the endpoint device that delegated an ownership of the endpoint device to a current owner of the endpoint device; and applying, by the endpoint device and in response to validating that the component license is signed by the trusted entity, the component license to the component as part of completing the onboarding of the endpoint device. ### Claim 9 (depends on 8) The non-transitory machine-readable medium of claim 8, wherein, prior to the onboarding being started and completed, the endpoint device is in a state that is unable to provide any computer-implemented services for the current owner. ### Claim 10 (depends on 9) The non-transitory machine-readable medium of claim 9, wherein the state is a late-bounding state where the endpoint device, prior to the onboarding being started, is not provisioned with a host operating system (OS). ### Claim 11 (depends on 9) The non-transitory machine-readable medium of claim 9, wherein the onboarding is part of a late bound zero-touch secure provisioning (ZTSP) process. ### Claim 12 (depends on 11) The non-transitory machine-readable medium of claim 11, wherein the ownership voucher comprises a certificate that: comprises a license payload that contains the component license, comprises a delegation of the ownership of the endpoint device from the trusted entity to the current owner, and is cryptographically signed by the trusted entity. ### Claim 13 (depends on 12) The non-transitory machine-readable medium of claim 12, wherein the certificate is part of a certificate chain comprising one or more instances of the certificate, the certificate chain delegates authority from a root of trust of the endpoint device to the current owner, the root of trust being associated with the trusted entity, and the certificate chain being cryptographically verifiable back to the root of trust using respective public private key pairs of the current owner and the trusted entity, and validating that the component license is associated with a trusted entity comprises using the respective public private key pairs of the current owner and the trusted entity to cryptographically validate the certificate chain back to the root of trust. ### Claim 14 (depends on 8) The non-transitory machine-readable medium of claim 8, wherein the component license comprises an activation key or a license file, and applying the component license to the component comprises: using, by the endpoint device and without any intervention by the current owner, the activation key or the license file from the component license to activate one or more functions of the component. ### Claim 15 An endpoint device, comprising: a processor; and a memory coupled to the processor to store instructions, which when executed by the processor, cause the endpoint device to perform operations for onboarding, the operations comprising: during an onboarding of the endpoint device: obtaining an ownership voucher, the ownership voucher comprising a component license associated with a component of the endpoint device; validating, using the ownership voucher, that the component license is signed by a trusted entity associated with the endpoint device that delegated an ownership of the endpoint device to a current owner of the endpoint device; and applying, in response to validating that the component license is signed by the trusted entity, the component license to the component as part of completing the onboarding of the endpoint device. ### Claim 16 (depends on 15) The endpoint device of claim 15, wherein, prior to the onboarding being started and completed, the endpoint device is in a state that is unable to provide any computer-implemented services for the current owner. ### Claim 17 (depends on 16) The endpoint device of claim 16, wherein the state is a late-bounding state where the endpoint device, prior to the onboarding being started, is not provisioned with a host operating system (OS), and wherein the onboarding is part of a late bound zero-touch secure provisioning (ZTSP) process. ### Claim 18 (depends on 17) The endpoint device of claim 17, wherein the ownership voucher comprises a certificate that: comprises a license payload that contains the component license, comprises a delegation of the ownership of the endpoint device from the trusted entity to the current owner, and is cryptographically signed by the trusted entity. ### Claim 19 (depends on 18) The endpoint device of claim 18, wherein the certificate is part of a certificate chain comprising one or more instances of the certificate, the certificate chain delegates authority from a root of trust of the endpoint device to the current owner, the root of trust being associated with the trusted entity, and the certificate chain being cryptographically verifiable back to the root of trust using respective public private key pairs of the current owner and the trusted entity, and validating that the component license is associated with a trusted entity comprises using the respective public private key pairs of the current owner and the trusted entity to cryptographically validate the certificate chain back to the root of trust. ### Claim 20 (depends on 19) The endpoint device of claim 19, wherein the component license comprises an activation key or a license file, and applying the component license to the component comprises: using, by the endpoint device and without any intervention by the current owner, the activation key or the license file from the component license to activate one or more functions of the component.