A first host system can be configured initially with a first host identity
and a second host system can be configured initially with a second host
identity. A host identity can belong to only one host system at a time.
An administrator system can hold an additional host identity. The
administrator system can securely connect to the first host system and
can pass the additional host identity to the first host system. The first
host system can reconfiguring itself to use the additional host identity
and can pass the first host identity to the administrator system. The
administrator system can securely connect to the second host system and
can pass the first host identity to the second host system. The second
host system can then reconfigure itself to use the first host identity
and pass the second host identity to the administrator system. In this
manner the first host identity can be passed securely from the first to
the host system without a risk of duplication.