Patent ID: 9571472
Date: 2017-02-14
CPC Classifications: G06F,H04L,H04W

Claim:
1. A non-transitory computer-readable storage medium to store an initialization application that, when executed by a cryptographic manager (CM) device, causes the CM device to perform operations comprising: performing, by the initialization application executing on the CM device at a first occurrence, a device definition process to generate a device definition request to establish a unique identity and a root of trust of the CM device, the CM device to be deployed in a CM system; in response to the device definition request, obtaining device information comprising device identity and device credentials of the CM device and storing the device definition request with the device information in storage space of a removable storage device, wherein the device information comprises a device identifier and a public key of an asymmetric key pair stored at the CM device; and importing, by the initialization application executing on the CM device at a second occurrence, a device definition response stored in the storage space of the removable storage device, the device definition response comprising provisioning information generated by a provisioning device associated with the CM system in response to the device definition request, and wherein the provisioning information comprises a device nonce encrypted with the public key, a certificate, and a second private key of a second asymmetric key pair.