Patent ID: 8700893

Claim:
One or more computer-readable storage devices that store executable instructions to request a certificate of a first key, wherein the executable instructions, when executed by a computer, cause the computer to perform acts comprising: creating a certificate request to have said first key certified; requesting, from a trusted platform module, an attestation identity key bound to said certificate request; receiving, from said trusted platform module, an identity binding that binds said attestation identity key to said certificate request; requesting that said trusted platform module sign said first key with said attestation identity key; receiving, from said trusted platform module, a key certification structure that contains said first key and that is signed by said attestation identity key; sending, to a certificate authority and without first establishing that said certificate authority trusts said attestation identity key, information that comprises said certificate request, said identity binding, said key certification structure, and a first certificate of said trusted platform module's public endorsement key; and receiving, from said certificate authority, a second certificate of said first key, said second certificate being in a form that is usable only after action is taken by said trusted platform module to verify for said certificate authority that said certificate authority trusts said attestation identity key.