Centralized management of addon baseboard management controllers (BMCs) through an integrated server remote access controller using secure tokens

An information handling system comprising:

• a server chassis;
• a data processing unit deployed in the server chassis, the data processing unit comprising a baseboard management controller, the data processing unit configured to:
• communicate with the baseboard management controller of the data processing unit to create a bootstrap credential;
• generate a secure token;
• and
• share the secure token with the server chassis remote access controller for use in direct communications between the server chassis remote access controller and the baseboard management controller of the data processing unit;
• and
• a server chassis remote access controller integrated into the server chassis, the server chassis remote access controller configured to:
• embed the secure token in a communication from the server chassis remote access controller to the baseboard management controller of the data processing unit, the secure token authorizing the server chassis remote access controller to the baseboard management controller of the data processing unit and authorizing the baseboard management controller of the data processing unit to the server chassis remote access controller;
• generate an initial token authorizing the server chassis remote access controller to the data processing unit and authorizing the data processing unit to the server chassis remote access controller;
• and
• embed the initial token in request for a resource of the baseboard management controller of the data processing unit;
• wherein:
• communication between the server chassis remote access controller and the data processing unit is authorized;
• and
• communication between the data processing unit and the baseboard management controller of the data processing unit is authorized.

A non-transitory computer readable medium having program instructions stored thereon that, upon execution by an integrated server remote access controller, cause the integrated server remote access controller to:

• embed a secure token in a communication from the integrated server remote access controller to a baseboard management controller of a data processing unit deployed in the server chassis, the secure token authorizing the integrated server remote access controller to the baseboard management controller of the data processing unit and authorizing the baseboard management controller of the data processing unit to the server chassis remote access controller;
• wherein the secure token comprises:
• a first layer token authorizing the integrated server remote access controller to the data processing unit and authorizing the data processing unit to the server chassis remote access controller;
• and
• a second layer token authorizing the data processing unit to the baseboard management controller of the data processing unit and authorizing the baseboard management controller of the data processing unit to the data processing unit;
• generate the first layer token;
• and
• embed the first layer token in a request to the data processing unit for a resource of the baseboard management controller of the data processing unit;
• and
• upon execution by the data processing unit, the program instructions further cause the data processing unit to:
• recognize the request as a request for the resource of the baseboard management controller of the data processing unit;
• generate the second layer token and the secure token, in response to recognition of the request as a request for the resource of the baseboard management controller of the data processing unit;
• and
• pass the secure token to the integrated server remote access controller for use in new requests;
• wherein:
• communication between the integrated server remote access controller and the data processing unit is authorized;
• and
• communication between the data processing unit and the baseboard management controller of the data processing unit is authorized.