Maintaining dual-party authentication requirements for data retention compliance within a distributed server environment

A method comprising:

• applying a retention lock to data stored by a storage system, the retention lock requiring a dual-party authentication to modify the data, the dual-party authentication requiring credentials from a first authorized user and a second authorized user, the storage system including a plurality of servers each associated with a corresponding remote access controller that allows a third authorized user to modify a storage configuration associated with the storage system;
• receiving, from the first authorized user, a request to enable a retention lock compliance mode for the plurality of servers;
• confirming credentials from the second authorized user, in response to the request to enable the retention lock compliance mode;
• disabling, by a configuration manager, existing user accounts associated with the remote access controller corresponding to a first server, the existing user accounts including an account associated with the third authorized user;
• creating, by the configuration manager, an administrative user account and a limited user account for the remote access controller corresponding to the first server, the administrative user account set to a disabled state and the limited user account set to an enabled state;
• saving, by the configuration manager, a user account configuration profile associated with the remote access controller corresponding to the first server;
• applying, by the configuration manager, the saved user account configuration profile to at least a second server to disable existing user accounts associated with the remote access controller corresponding to the second server and create the administrative user account and the limited user account;
• and
• activating the retention lock compliance mode for the first server and the second server, the retention lock compliance mode requiring the dual-party authentication to access either of the remote access controllers corresponding to the first server or the second server.

A computer program product comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein to be executed by one or more processors, the program code including instructions to:

• apply a retention lock to data stored by a storage system, the retention lock requiring a dual-party authentication to modify the data, the dual-party authentication requiring credentials from a first authorized user and a second authorized user, the storage system including a plurality of servers each associated with a corresponding remote access controller that allows a third authorized user to modify a storage configuration associated with the storage system;
• receive, from the first authorized user, a request to enable a retention lock compliance mode for the plurality of servers;
• confirm credentials from the second authorized user, in response to the request to enable the retention lock compliance mode;
• disable, by a configuration manager, existing user accounts associated with the remote access controller corresponding to a first server, the existing user accounts including an account associated with the third authorized user;
• create, by the configuration manager, an administrative user account and a limited user account for the remote access controller corresponding to the first server, the administrative user account set to a disabled state and the limited user account set to an enabled state;
• save, by the configuration manager, a user account configuration profile associated with the remote access controller corresponding to the first server;
• apply, by the configuration manager, the saved user account configuration profile to at least a second server to disable existing user accounts associated with the remote access controller corresponding to the second server and create the administrative user account and the limited user account;
• and
• activate the retention lock compliance mode for the first server and the second server, the retention lock compliance mode requiring the dual-party authentication to access either of the remote access controllers corresponding to the first server or the second server.