A method and system for securely provisioning a host, the method including determining, by a provisioning system, a physical path from the host in a cloud to the provisioning system, wherein the physical path includes static mapping for a device between the host and the provisioning system. The provisioning system receives a request to provision a virtual machine on a guest host in a cloud, and sends installation information for the virtual machine via the determined physical path.