A method for migrating a base chip key from a first computer system to a second
computer system is disclosed. A first computer system includes a base chip key
1, and a second computer system includes a base chip key 2. Using
a first certificate for the base chip key 1, a manufacturer of the second
computer system generates a second certificate for the base chip key 1.
Similarly, using a first certificate for the base chip key 2, a manufacturer
of the first computer system generates a second certificate for the base chip key
2. A first data packet is then sent from the first computer system to the
second computer system. The first data packet includes a first random number and
all the data required to reproduce the base chip key 1 in the first computer
system. The first data packet is also encrypted with the base chip key 1's
public key. In return, a second data packet is sent from the second computer system
to the first computer system, and the second data packet includes the first random
number and a second random number, signed by the base chip key 2. The base
chip key 1 is then erased from the first computer system. Finally, the base
chip key 2 in the second computer system is replaced by the base chip key
1.