Virtualizing secure storage of a baseboard management controller to a host computing device
AssigneeHewlett Packard Enterprise Development LP
InventorLuis Enrique Luciani, Jr.
Life of this patent
Estimating the term…
Abstract
Example implementations relate a system and method for storing configuration files of a host computing device in a secure storage of a Baseboard Management Controller (BMC). The secure storage includes configuration files associated with the host computing device. The BMC is communicatively connected to the host computing device using a communication link. The secure storage is emulated as a storage device to the host computing device. The BMC monitors the secure storage to detect changes in the configuration files. When there is a change in a configuration file, the BMC performs a security action in the host computing device.
Claims20
A system comprising:
- a baseboard management controller (BMC) to communicate with a host computing device through a communication link, the BMC comprising a processor and a machine-readable storage medium storing instructions executable on the processor to:
- emulate, by the BMC, a secure storage storing a plurality of configuration files as an emulated storage device to the host computing device through the communication link;
- monitor the plurality of configuration files in the secure storage to detect changes in the configuration files;
- initiate a security action in the host computing device in response to detecting an unauthorized change in a configuration file of the plurality of configuration files;
- receive, at the BMC, a request to update a first configuration file of the plurality of configuration files in the secure storage, wherein the first configuration file is associated with an application;
- check version information, stored in the BMC, of the application to determine whether the version information matches expected version information of the application;
- and
- determine to allow the update of the first configuration file specified by the request based on the version information stored in the BMC matching the expected version information.
A method comprising:
- emulating, by a baseboard management controller (BMC) to a host computing device through a communication link, a secure storage storing a plurality of configuration files as an emulated storage device;
- monitoring, by the BMC, the plurality of configuration files in the secure storage to detect changes in the configuration files;
- in response to detecting an unauthorized change in a configuration file of the plurality of configuration files, initiating a security action in the host computing device;
- receiving, at the BMC, a request to update a first configuration file of the plurality of configuration files in the secure storage, wherein the first configuration file is associated with an application;
- checking version information, stored in the BMC, of the application to determine whether the version information matches expected version information of the application;
- and
- determining, by the BMC, to allow the update of the first configuration file specified by the request based on the version information stored in the BMC matching the expected version information.
A non-transitory machine readable machine-readable medium storing instructions executable by a processing resource of a baseboard management controller (BMC) to:
- emulate a secure storage storing a plurality of configuration files as an emulated storage device to a host computing device through a communication link;
- monitor the plurality of configuration files in the secure storage to detect changes in the plurality of configuration files;
- initiate a security action in the host computing device in response to detecting an unauthorized change in a configuration file of the plurality of configuration files;
- receive, at the BMC, a request to update a first configuration file of the plurality of configuration files in the secure storage, wherein the first configuration file is associated with an application;
- check version information, stored in the BMC, of the application to determine whether the version information matches expected version information of the application;
- and
- determine, at the BMC, to allow the update of the first configuration file specified by the request based on the version information stored in the BMC matching the expected version information.
Dependencies are inferred from the claim text.