If you have got a few thousand new computers you will need to physically install them and configuration can be done at that time. Alternatively the supplier can supply a private key or signed instruction to install a new public key.

There should be a conditionally enabled APIs for installing keys.