MANAGING USE OF MANAGEMENT CONTROLLER SECRETS BASED ON FIRMWARE OWNERSHIP HISTORY

    公开(公告)号:US20240372714A1

    公开(公告)日:2024-11-07

    申请号:US18777056

    申请日:2024-07-18

    Abstract: A management controller of a computer platform, determines whether an ownership history of management firmware for the management controller represents multiple owners. The management controller includes a set of one-time programmable elements that represent a first secret. The management controller manages use of the first secret based on the ownership history. The management includes, responsive to determining, by the management controller, that the ownership history represents multiple owners, generating, by the management controller, a second secret to replace the first secret. The management further includes, responsive to determining, by the management controller, that the ownership history represents multiple owners, storing, by the management controller, the second secret in a non-volatile memory and generating, by the management controller, cryptographic keys based on the second secret.

    MANAGEMENT INTERFACE ACCESS IN STORAGE SYSTEMS

    公开(公告)号:US20230135502A1

    公开(公告)日:2023-05-04

    申请号:US17515685

    申请日:2021-11-01

    Abstract: Examples described herein relate to configuring access to management interface of a storage system. Examples may obtain network adapter information of the host devices coupled to the storage system using credentials of a management controller of the host devices. Examples may create an allow-list or deny-list containing the network adapter information of the host devices. Examples may allow or deny connections to the management interface from the host devices based on the allow-list or deny-list. Examples may allow dynamic updating of the allow-list and deny-list based on a change in a network adapter of the host device.

    VIRTUALIZING SECURE STORAGE OF A BASEBOARD MANAGEMENT CONTROLLER TO A HOST COMPUTING DEVICE

    公开(公告)号:US20240005021A1

    公开(公告)日:2024-01-04

    申请号:US18468075

    申请日:2023-09-15

    CPC classification number: G06F21/6218 G06F16/152

    Abstract: Example implementations relate a system and method for storing configuration files of a host computing device in a secure storage of a Baseboard Management Controller (BMC). The secure storage includes configuration files associated with the host computing device. The BMC is communicatively connected to the host computing device using a communication link. The secure storage is emulated as a storage device to the host computing device. The BMC monitors the secure storage to detect changes in the configuration files. When there is a change in a configuration file, the BMC performs a security action in the host computing device.

    MANAGING USE OF MANAGEMENT CONTROLLER SECRETS BASED ON FIRMWARE OWNERSHIP HISTORY

    公开(公告)号:US20230246827A1

    公开(公告)日:2023-08-03

    申请号:US17588620

    申请日:2022-01-31

    CPC classification number: H04L9/0861 H04L9/0891 H04L9/0894 G06F9/4401

    Abstract: A management controller of a computer platform, determines whether an ownership history of management firmware for the management controller represents multiple owners. The management controller includes a set of one-time programmable elements that represent a first secret. The management controller manages use of the first secret based on the ownership history. The management includes, responsive to determining, by the management controller, that the ownership history represents multiple owners, generating, by the management controller, a second secret to replace the first secret. The management further includes, responsive to determining, by the management controller, that the ownership history represents multiple owners, storing, by the management controller, the second secret in a non-volatile memory and generating, by the management controller, cryptographic keys based on the second secret.

Patent Agency Ranking