Methods and apparatus to manage credentials in hyper-converged infrastructures

A method to manage credentials in a hyper-converged infrastructure, the method comprising:

• establishing, by executing an instruction with at least one processor, a communication between a software defined data center manager of the hyper-converged infrastructure and a component of the hyper-converged infrastructure using first credentials included in a known hosts file;
• generating, by executing an instruction with the at least one processor, a public-private key pair at the component in response to a power-on event detected by the software defined data center manager;
• recording, by executing an instruction with the at least one processor, a public key portion of the public-private key pair in the known host file;
• encrypting the public key portion of the public-private key pair using a shared key stored in a credentials manager, a private key portion of the public-private key pair stored at the component;
• recording the encrypted public key portion of the public-private key pair in a keys database;
• in response to deleting the known hosts file, retrieving, by executing an instruction with the at least one processor, the encrypted public key portion of the public-private key pair from the keys database;
• and
• recording, by executing an instruction with the at least one processor, a decrypted public key portion of the public-private key pair in a new known hosts file.

A non-transitory computer readable storage medium comprising instructions that, when executed, cause a machine to at least:

• establish a communication between a software defined data center manager of the hyper-converged infrastructure and a component of the hyper-converged infrastructure using first credentials included in a known hosts file;
• generate a public-private key pair at the component in response to a power-on event detected by the software defined data center manager;
• record a public key portion of the public-private key pair in the known host file;
• encrypt the public key portion of the public-private key pair using a shared key stored in a credentials manager, a private key portion of the public-private key pair stored at the component;
• record the encrypted public key portion of the public-private key pair in a keys database;
• in response to deleting the known hosts file, retrieve the encrypted public key portion of the public-private key pair from the keys database;
• and
• record a decrypted public key portion of the public-private key pair in a new known hosts file.