Patent ID: 8438618

Claim:
A method comprising: selecting a zero-touch provisioning feature using an un-secured domain name server option in response to determining that a certificate hash is present and a provisioning pre-shared key is not present, wherein the zero-touch provisioning feature using the un-secured domain name server option includes, sending an update command to a client device to check whether the client device supports provisioning, generating a one-time password in a management console after receiving active management technology values from the client device, storing the one-time password in a provisioning server and the client device, instructing an active management unit to open a network interface to listen to a set-up message, identifying the provisioning server if a fully qualified domain name is not available, authenticating the client device using the one-time password by receiving the one-time password from the client device, and matching the one-time password received from the client device with the one-time password stored in the provisioning server, authenticating the provisioning server using a certificate chain by providing a self-signed certificate to the provisioning server, wherein the self-signed certificate and a key-pair is generated by the client device, receiving the set-up message comprising a certificate chain over the network interface, wherein the certificate chain includes a root of trust, and matching a hash value of the certificate chain with a plurality of stored hash values, auditing the provisioning server, and establishing a secure connection between the client device and the provisioning server, wherein the zero-touch provisioning feature enables the secure connection to be established between the client device and the provisioning server without initiation from a user of the client device.