Virtualizing secure storage of a baseboard management controller to a host computing device
AssigneeHewlett Packard Enterprise Development LP
InventorLuis E. Luciani, Jr.
Life of this patent
Estimating the term…
Abstract
Example implementations relate a system and method for storing configuration files of a host computing device in a secure storage of a Baseboard Management Controller (BMC). The secure storage includes configuration files associated with the host computing device. The BMC is communicatively connected to the host computing device using a communication link. The secure storage is emulated as a storage device to the host computing device. The BMC monitors the secure storage to detect changes in the configuration files. When there is a change in a configuration file, the BMC performs a security action in the host computing device.
Claims20
A system comprising:
- a baseboard management controller (BMC) to communicate with a host computing device through a communication link, the BMC comprising a processor and a machine-readable storage medium storing instructions executable on the processor to:
- emulate, by the BMC, a secure storage storing a plurality of configuration files as an emulated storage device to the host computing device through the communication link;
- monitor the plurality of configuration files in the secure storage to detect changes in the configuration files;
- initiate a security action in the host computing device in response to detecting an unauthorized change in a configuration file of the plurality of configuration files;
- receive, at the BMC, a request to update a first configuration file of the plurality of configuration files in the secure storage, wherein the first configuration file is associated with an application;
- responsive to the request, check a current configuration of an operating system (OS) in the host computing device;
- and
- allow the update of the first configuration file specified by the request based on the check of the current configuration of the OS.
A method comprising:
- emulating, by a baseboard management controller (BMC) to a host computing device through a communication link, a secure storage storing a plurality of configuration files as an emulated storage device;
- monitoring, by the BMC, the plurality of configuration files in the secure storage to detect changes in the configuration files;
- in response to detecting an unauthorized change in a configuration file of the plurality of configuration files, initiating a security action in the host computing device;
- receiving, at the BMC, a request to update a first configuration file of the plurality of configuration files in the secure storage, wherein the first configuration file is associated with an application;
- based on the request, checking, by the BMC, a current configuration of an operating system (OS) in the host computing device;
- and
- allowing, by the BMC, the update of the first configuration file specified by the request based on the check of the current configuration of the OS.
A non-transitory machine-readable medium storing instructions executable by a processing resource of a baseboard management controller (BMC) to:
- emulate a secure storage storing a plurality of configuration files as an emulated storage device to a host computing device through a communication link;
- monitor the plurality of configuration files in the secure storage to detect changes in the plurality of configuration files;
- initiate a security action in the host computing device in response to detecting an unauthorized change in a configuration file of the plurality of configuration files;
- receive, at the BMC, a request to update a first configuration file of the plurality of configuration files in the secure storage, wherein the first configuration file is associated with an application;
- responsive to the request, check a current configuration of an operating system (OS) in the host computing device;
- and
- allow the update of the first configuration file specified by the request based on the check of the current configuration of the OS.
Dependencies are inferred from the claim text.