Unlocking access of information responsive to validation of program codes of virtual entities
AssigneeHewlett Packard Enterprise Development LP
InventorsJoseph Wright, Chris Davenport
Life of this patent
Estimating the term…
Abstract
In some examples, a management controller includes a communication interface to communicate with a computing device, where the management controller is separate from a processor of the computing device. The management controller includes a management processor to perform a validation of program codes of virtual entities of the computing device, and in response to the validation of the program codes, unlock access of information in an information store to allow access of the information by the computing device, wherein the information is for use by the virtual entities of the computing device, and wherein the management processor is to block access of the information in the information store prior to the validation.
Claims20
A computer system comprising:
- a management controller comprising:
- a memory to store an encrypted version of configuration data for virtual entities in a computing device, wherein the configuration data defines functions of the virtual entities;
- a communication interface to communicate with the computing device, wherein the management controller is separate from a processor of the computing device;
- and
- a management processor to:
- perform a validation of program codes of the virtual entities of the computing device,
- block access of the encrypted version of the configuration data in the memory of the management controller prior to the validation by preventing communication of a decryption key to the computing device, and
- in response to the validation of the program codes, unlock access of the encrypted version of the configuration data by sending the decryption key to the computing device, the decryption key useable by the program codes in decrypting the encrypted version of the configuration data to produce decrypted configuration data defining the functions of the virtual entities;
- a processor;
- and
- a storage medium storing the program codes that are executable on the processor to configure the virtual entities using the decrypted configuration data defining the functions of the virtual entities.
A non-transitory machine-readable storage medium comprising instructions that upon execution cause a system to:
- store, in a memory of a management controller in the system, an encrypted version of configuration data for a cluster of virtual entities in a computing device of the system, the configuration data defining functions of the virtual entities in the cluster of virtual entities;
- perform validation of program codes of the cluster of virtual entities, wherein the management controller is separate from the computing device and remains powered by an auxiliary power supply even when power is removed from the computing device;
- block access of the encrypted version of the configuration data in the memory of the management controller prior to the validation by preventing communication of a decryption key to the computing device;
- in response to the validation of the program codes, unlock access of the encrypted version of the configuration data by sending the decryption key to the computing device;
- decrypting, by the program codes using the decryption key, the encrypted version of the configuration data to produce decrypted configuration data that defines the functions of the virtual entities in the cluster of virtual entities;
- and
- configure the virtual entities of the cluster of virtual entities using the decrypted configuration data that defines the functions of the virtual entities in the cluster of virtual entities.
A method comprising:
- storing, in a memory of a management controller, an encrypted version of configuration data for virtual entities in a computing device, wherein the configuration data defines functions of the virtual entities;
- communicating, by the management controller, with the computing device, wherein the management controller is separate from a processor of the computing device;
- performing, by the management controller, a validation of program codes of the virtual entities of the computing device;
- blocking, by the management controller, access of the encrypted version of the configuration data in the memory of the management controller prior to the validation by preventing communication of a decryption key to the computing device;
- in response to the validation of the program codes, unlocking, by the management controller, access of the encrypted version of the configuration data by sending the decryption key to the computing device;
- decrypting, by the program codes using the decryption key, the encrypted version of the configuration data to produce decrypted configuration data defining the functions of the virtual entities;
- and
- configuring the virtual entities using the decrypted configuration data defining the functions of the virtual entities.
Dependencies are inferred from the claim text.