System and method for unattended computer system access

A computer implemented method for providing secure access to a remote computer system, the remote computer system including an encrypted storage medium storing an operating system and being arranged to require local authentication at the remote computer system for decrypting the operating system to enable booting boot an operating system, the method comprising:

• operating the remote computer in a first mode to receive credentials from a user at the remote computer system, authenticate the credentials without reference to a system external to the remote computer system and, upon successful authentication, cause decryption of the encrypted storage medium to enable booting of the operating system;
• operating the remote computer system in a second mode upon receiving a boot request over a data communications network, including:
• causing activation of the remote computer system and causing execution of a client module at the remote computer system prior to boot of the operating system at, the remote computer system;
• receiving an authentication message from the remote computer system, the authentication message including a Session ID for the client module;
• authenticating the authentication message and providing access data for the remote computer system to said client module over the network upon authentication of the authentication message,
• the access data being arranged to cause the client module to complete local authentication including causing decryption of the operating system and boot the operating system of the remote computer system.

A patch management system for patching of a remote computer system, the remote computer system having a processor and an encrypted storage medium storing an operating system, the processor of the remote computer system being configured to operate the remote computer system in a first mode to execute computer program code to require local authentication at the remote computer system by presentation of credentials from a user at the remote computer system, wherein the local authentication is without reference to a system external to the remote computer, for decrypting the operating system to boot the operating system, the patch management system comprising an authentication system and a client module, wherein:

• the patch management system is arranged to trigger activation of the remote computer system by transmitting a boot request over a data communications network;
• upon receiving a boot request over the data communications network from the patch management system, the processor of the remote computer system being configured to operate the remote computer system in a second mode to execute computer program code to execute the client module prior to booting of the operating system at the remote computer system, the computer program code being configured upon execution to obtain access data over a network from the authentication system for access to the computer system and to use said access data to perform said local authentication, cause decryption of the operating system and boot said operating system;
• the authentication system being arranged to said store access data for the computer system in a data repository and being responsive to provide said access data to said client module over the network upon authentication of a request from the client module,
• upon booting of the operating system using the access data, the patch management system being arranged to patch the remote computer system and deactivate the computer system.