Encrypted virtual media to prevent disclosure of confidential bootable media

A method comprising:

• a management controller of an information handling system that is configured to provide out-of-band management of the information handling system causing a host system of the information handling system to boot from a bootstrap image stored at the management controller, the bootstrap image including a cryptographic key;
• the host system using the cryptographic key to decrypt an encrypted diagnostic utility image;
• and
• the host system executing code from the decrypted diagnostic utility image to perform a diagnostic of a hardware component of the host system.

An article of manufacture comprising a non-transitory, computer-readable medium having computer-executable instructions thereon that are executable by a management controller of an information handling system that is configured to provide out-of-band management of the information handling system for:

• causing a host system of the information handling system to boot from a bootstrap image stored at the management controller, the bootstrap image including a cryptographic key;
• wherein the host system is configured to use the cryptographic key to decrypt an encrypted diagnostic utility image;
• and
• wherein the host system is configured to execute code from the decrypted diagnostic utility image to perform a diagnostic of a hardware component of the host system.