Patent ID: 8645677
Filing Date: 2014-02-04
Classification: H04L

Abstract:
1. At least one non-transitory machine-accessible medium having instructions stored thereon, the instructions when executed on a machine cause the machine to: receive a security credential, wrapped with a first instantiation of a first key, from a remotely located provider; decrypt the credential within a hardware security engine using a second instantiation of the first key, the security engine being out-of-band from a processor that runs an operating system for the machine; wrap the credential based on an identifier permanently embedded in hardware included in the security engine; wrap the second instantiation of the first key based on the identifier; and store the wrapped second instantiation of the first key in non-volatile memory that is outside the security engine, but within a platform that includes the security engine, and is in-band with the processor; wherein (a) the first key is based on the identifier, and (b) the credential is received via an out-of-band communication.