System and method for providing quality of service during transport key rotation at a distributed management controller group

An information handling system, comprising:

• a processor subsystem having access to a first memory;
• a management controller comprising a secondary processor having access to a second memory, the second memory including an embedded storage partition and the second memory storing instructions executable by the secondary processor to:
• generate a new transport encryption key for a management controller group, the new transport encryption key for encrypted communications in the management controller group;
• notify, by a master of the management controller group, nodes in the management controller group to negotiate for the new transport encryption key, the new transport encryption key to replace a current transport encryption key;
• encrypt, by the master of the management controller group, a first message to be sent to a first node in the management controller group using the current transport encryption key, the first message encrypted after the nodes in the management controller group are notified to negotiate for the new transport encryption key, the nodes of the management controller group including the first node;
• receive a second message at the master of the management controller group, the second message received from the first node after the nodes in the management controller group are notified to negotiate for the new transport encryption key and before the first message is encrypted by the master;
• decrypt the second message using the current transport encryption key;
• determine whether the decryption using the current transport encryption key was successful;
• and
• decrypt the second message using the new transport encryption key based on a determination that the decryption using the current transport encryption key was not successful.

A management controller for an information handling system having a primary processor and a primary memory, the management controller comprising a secondary processor having access to a secondary memory, the secondary memory including an embedded storage partition and the secondary memory storing instructions executable by the secondary processor to:

• generate a new transport encryption key for a management controller group, the new transport encryption key for encrypted communications in the management controller group;
• notify, by a master of the management controller group, nodes in the management controller group to negotiate for the new transport encryption key, the new transport encryption key to replace a current transport encryption key;
• encrypt, by the master of the management controller group, a first message to be sent to a first node in the management controller group using the current transport encryption key, the first message encrypted after the nodes in the management controller group are notified to negotiate for the new transport encryption key, the nodes of the management controller group including the first node;
• receive a second message at the master of the management controller group, the second message received from the first node after the nodes in the management controller group are notified to negotiate for the new transport encryption key and before the first message is encrypted by the master;
• decrypt the second message using the current transport encryption key;
• determine whether the decryption using the current transport encryption key was successful;
• and
• decrypt the second message using the new transport encryption key based on a determination that the decryption using the current transport encryption key was not successful.