Patent ID: 11888972
Assignee: RED HAT, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 19:
20. A non-transitory machine-readable medium storing code, which when executed by a processor is configured to:
launch an escrow TEE instance provisioned with a secret, wherein the secret is initially accessible from a first location, and wherein accessibility to the secret in the first location is restricted after provisioning the escrow TEE instance with the secret;
receive a request to start an application TEE instance;
obtain, during a launch of the application TEE instance, a cryptographic measurement associated with the application TEE instance;
validate, the application TEE instance;
upon a successful validation of the application TEE instance provide the secret from a second location to the application TEE instance, wherein the providing of the secret to the application TEE instance allows the application TEE instance to complete the launch;
create a clone TEE instance based on the application TEE instance; and
provide the secret to the clone TEE instance by the application TEE instance, wherein the clone TEE instance includes a clone service to launch additional clone TEE instances and provide the secret to the additional clone TEE instances.