Patent ID: 11943368
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 13:
14. A method performed using a processing system of a client device, the method comprising:
providing a template or an indication that a user associated with the client device selects the template to a distributed computing system that is coupled to the client device, wherein the template has not been customized with regard to the client device and has not been customized with regard to the user;
establishing a chain of trust from a trusted execution environment to a platform based at least in part on receipt of measurements of the trusted execution environment, which are signed with a platform signing key of the platform, from the platform,
the measurements indicating attributes of the trusted execution environment, which is hosted by the distributed computing system;

encrypting a public portion of a policy update key that is associated with the client device with a public portion of a provisioning encryption key, the policy update key having a private portion that is usable by the client device to sign an update regarding a policy that is to be provided to the trusted execution environment, the provisioning encryption key having a private portion that is associated with a plurality of trusted execution environments and that is usable by the trusted execution environment to decrypt the public portion of the policy update key, the plurality of trusted execution environments including the trusted execution environment; and
provisioning the trusted execution environment with the policy in absence of a secure channel between the client device and the trusted execution environment to customize the trusted execution environment with the policy based at least in part on the chain of trust in response to the trusted execution environment being launched from the template, which is associated with an operating system that is associated with the platform.