Patent ID: 8925066

Claim:
A method comprising: receiving, by a processing device running a provisioning proxy, an unauthenticated provisioning request comprising a network boot command from a hardware resource, wherein the processing device is in a first network zone that is accessible to the hardware resource; determining, by the processing device, whether the hardware resource satisfies one or more provisioning criteria; responsive to determining that the hardware resource satisfies the one or more provisioning criteria: forwarding the provisioning request to a server residing behind a firewall in a second network zone that is inaccessible to the hardware resource; receiving, by the processing device, provisioning data from the server; removing, by the processing device, sensitive information of the server from the provisioning data, the sensitive information of the server comprising a network address of the server; and forwarding the provisioning data to the hardware resources; receiving a descriptor of the hardware resource that identifies properties of the hardware resource; and reporting the descriptor to the server to enable the server to add an entry to an inventory of available hardware resources based on the descriptor.