Patent ID: 11888972
Assignee: RED HAT, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 10:
11. A method comprising:
launching, by a processor, an escrow TEE instance provisioned with a secret, wherein the secret is initially accessible from a first location, and wherein accessibility to the secret in the first location is restricted after provisioning the escrow TEE instance with the secret;
launching the application TEE instance;
obtaining, during a launch of the application TEE instance, a cryptographic measurement associated with the application TEE instance;
validating the application TEE instance;
based upon a successful validation of the application TEE instance, providing the secret from a second location to the application TEE instance;
upon the receipt of the secret by the application TEE instance, creating, by the application TEE instance, a clone TEE instance of the application TEE instance; and
providing the secret to the clone TEE instance by the application TEE instance, wherein the clone TEE instance comprises a service to launch additional clone TEE instances, wherein the clone TEE instance is configured to provide the secret to the additional clone TEE instances.