Secure creation of encrypted virtual machines from encrypted templates

In a computing environment, one or more computer readable physical storage media comprising computer executable instructions stored thereon that when executed by one or more processors cause the following to be performed:

• a target machine beginning a boot process wherein the target machine begins the boot process based on a template;
• the target machine determining that it needs provisioning data to continue booting;
• the target machine contacting a secure infrastructure to obtain the provisioning data;
• the target machine providing an identity claim that can be verified by the secure infrastructure;
• as a result of the secure infrastructure verifying the identity claim, the target machine receiving a request from the secure infrastructure to establish a key sealed to the target machine;
• the target machine providing the established key to the secure infrastructure;
• the target machine receiving the provisioning data from the secure infrastructure, wherein the provisioning data is encrypted to the established key;
• the target machine decrypting the encrypted provisioning data;
• the target machine using the provisioning data to verify that the template is acceptable for use in booting the target machine;
• and
• the target machine using the provisioning data to finish booting.

A computing system comprising one or more processors executing computer executable instructions which, when executed, configure the computing system with an architecture that boots a target machine in a secure fashion in a potentially unsecure environment, and wherein the architecture performs the following:

• begins a boot process for a target machine based on a template;
• makes a determination that provisioning data is needed to continue booting;
• contacts a secure infrastructure to obtain the provisioning data;
• provides an identity claim that can be verified by the secure infrastructure;
• as a result of the secure infrastructure verifying the identity claim, receives a request from the secure infrastructure to establish a key sealed to the target machine;
• provides the established key to the secure infrastructure;
• receives the provisioning data from the secure infrastructure, wherein the provisioning data is encrypted to the established key;
• and
• decrypts the encrypted provisioning data, and uses the provisioning data to verify that the template is acceptable for use in booting the target machine, and then uses the provisioning data to finish booting the target machine.