Systems and methods of automatic out-of-band (OOB) restricted cellular connectivity for set up provisioning of managed client information handling systems

Patent metadata

Field	Value
Publication number	US-12543044-B2
Application number	US-202217975153-A
Country	US
Kind code	B2
Filing date	Oct 27, 2022
Priority date	Oct 27, 2022
Publication date	Feb 3, 2026
Grant date	Feb 3, 2026

Abstract

A method of onboarding provisioning of a managed client information handling system, comprising a hardware processor executing code instructions of an endpoint onboarding agent to detecting a powering up process and automatically establish a first restricted bootstrap wireless wide-area network (WWAN) wireless link using a stored temporary provisional bootstrap embedded subscriber identity module (eSIM), identifying the managed client information handling system via the first restricted bootstrap WWAN wireless link to a remote information technology (IT) management server to trigger a second regular access WWAN wireless link for the managed client information handling system, provisioning a regular access eSIM profile to access the second regular access WWAN wireless link, and upon verified login credentials at an enterprise identity provider, downloading designated software applications for onboarding installation on the managed client information handling system.

First claim

What is claimed is:

1 . A method of onboarding provisioning of a managed client information handling system, comprising:
with a hardware processor, executing code instructions of an endpoint onboarding agent to detecting a powering up process at the managed client information handling system and automatically establish, via the wireless interface device, a first restricted bootstrap WWAN wireless link with a WWAN carrier using a stored temporary provisional bootstrap embedded subscriber identity module (eSIM); identifying the managed client information handling system via the first restricted bootstrap WWAN wireless link to a remote information technology (IT) management server of an enterprise to trigger a second regular access WWAN wireless link for the managed client information handling system; receiving an enablement instruction and provisioning for a regular access eSIM profile to access the second regular access WWAN wireless link from the WWAN carrier at an embedded universal integrated circuit card; receiving, via the second regular access WWAN wireless link, onboarding configuration settings for the managed client information handling system including identification of designated software applications for enterprise IT management controls for security on use of the managed client information handling system to access restricted enterprise files and designated software applications for execution to conduct user communications, for execution of user productivity software applications, and anti-virus or security software to protect access to enterprise network resources pursuant to an enterprise IT policy from the remote IT management server for onboarding installation of the managed information handling system for use within the enterprise; verifying login credentials at the enterprise identity provider; upon verified login credentials at the enterprise identity provider, downloading the designated software applications pursuant to the enterprise IT policy from the remote IT management server on the managed client information handling system during onboarding installation of the managed information handling system for use within the enterprise; and installing the designated software applications including identification of designated software applications for enterprise IT management controls for security on use of the managed client information handling system to access restricted enterprise files and designated software applications for execution to conduct user communications, for execution of user productivity software applications, and anti-virus or security software to protect access to enterprise network resources for onboarding installation of the managed information handling system for use within the enterprise to perform designated tasks.

2 . The method of claim 1 , wherein establishing the first restricted bootstrap WWAN wireless link includes connecting to the WWAN carrier using the temporary provisional bootstrap eSIM and an identifier of the managed client information handling system.

3 . The method of claim 1 , wherein the first restricted bootstrap WWAN wireless link is limited by the endpoint onboarding agent and the WWAN carrier to only communicate to the remote IT management server onboarding initialization data including managed client information handling system identifier data and location data for the managed client information handling system.

4 . The method of claim 1 , further comprising:
communicating via the first restricted bootstrap WWAN wireless link to the remote IT management server onboarding initialization data including a client information handling system identifier data and location data to trigger selection of the second regular access WWAN wireless link with a second WWAN carrier selected from a plurality of WWAN carriers for a location of the managed client information handling system identified by the location data.

5 . The method of claim 1 , further comprising:
when the first restricted bootstrap WWAN wireless link successfully communicates to the remote IT management server onboarding initialization data including a managed client information handling system identifier data and location data for the managed client information handling system, terminating the temporary first restricted bootstrap WWAN wireless link.

6 . The method of claim 1 , further comprising:
when the first restricted bootstrap WWAN wireless link successfully communicates to the remote IT management server onboarding initialization data including a managed client information handling system identifier data and location data, disabling the temporary provisional bootstrap eSIM for any further communications with the first restricted bootstrap WWAN wireless link.

7 . The method of claim 1 , further comprising:
upon verified login credentials at the enterprise identity provider, downloading plural client configuration settings for the managed client information handling system as additional onboarding measures.

8 . A managed client information handling system operating an onboarding provisioning system comprising:
a hardware processor, an embedded controller (EC), a memory, and a wireless interface device; an electronic subscriber identity module (eSIM) memory storing a temporary provisional bootstrap eSIM installed with a generic initial bootstrap profile to access a restricted bootstrap wireless wide area network (WWAN) link to a remote information technology (IT) management server of an enterprise for managing the managed client information handling system; the hardware processor executing code instructions of an endpoint onboarding agent to automatically establish, via the wireless interface device, the restricted bootstrap WWAN wireless link with a WWAN carrier using the temporary provisional bootstrap eSIM upon start-up of the managed client information handling system, where the restricted bootstrap WWAN wireless link transmits identifier data for the managed client information handling system to trigger a regular access WWAN wireless link for the managed client information handling system; an eSIM provisioning system including an embedded universal integrated circuit card (eUICC) to receive, via the wireless interface device, enablement instruction for a regular access eSIM profile to access a regular access WWAN wireless link from the WWAN carrier; the hardware processor to receive onboarding configuration settings for the managed client information handling system including designated software applications for enterprise IT management controls for security on use of the managed client information handling system to access restricted enterprise files and designated software applications for execution to conduct user communications, for execution of user productivity software applications, and anti-virus or security software to protect access to enterprise network resources pursuant to an enterprise IT policy from the remote IT management server for onboarding installation at the managed client information handling system for use in the enterprise; the endpoint agent to access the enterprise identity provider; and upon verified login credentials at the enterprise identity provider, the wireless interface device to receive the designated software applications on the managed client information handling system including identification of designated software applications for enterprise IT management controls for security on use of the managed client information handling system to access restricted enterprise files and designated software applications for execution to conduct user communications, for execution of user productivity software applications, and anti-virus or security software to protect access to enterpr

Assignees

• Dell Products Lp

Inventors

• Boyapalle Anantha K
• Low Chooi Peng
• Quinn Liam B
• Rajagopalan Vivekanandh Narayanasamy

Classifications

• H04W12/068 Primary

  using credential vaults, e.g. password manager applications or one time password [OTP] applications · CPC title

• H04W12/35 Primary

  Protecting application or service provisioning, e.g. securing SIM application provisioning · CPC title

• H04W12/06

  Authentication · CPC title