Denial of dynamic host configuration protocol internet protocol address allocation to an unauthorized node via cross secure boot verification

A method, comprising:

• in response to a device being determined to be authorized to access a network, facilitating, by a system comprising at least one processor, sending an authentication key to the device to result in storage of the authentication key in a device boot storage space of the device, wherein the authentication key has been signed by a key exchange key that has been stored in a switch boot storage space of a network switch of the network;
• in response to a dynamic host configuration protocol discover packet being determined, via the network switch, to have been received from the device, determining, by the system, whether the device boot storage space comprises the authentication key that has been signed by the key exchange key that has been stored in the switch boot storage space;
• and
• in response to the device boot storage space being determined to comprise the authentication key that has been signed by the key exchange key that has been stored in the switch boot storage space, facilitating, by the system, an assignment of an internet protocol address to the device to facilitate an access of the network by the device.

A non-transitory machine-readable medium comprising instructions that, in response to execution, cause a system comprising at least one processor to perform operations, the operations comprising:

• in response to determining that a client device has been authorized to access a network, sending a boot storage network access key to the client device to facilitate storage of the boot storage network access key in a memory partition of a device boot memory space of the client device, wherein the boot storage network access key has been signed by a key exchange key that has been stored in a network switch boot memory space of a network switch of the network;
• in response to determining that a dynamic host configuration protocol discover packet has been received, via the network switch, from the client device, blocking a dynamic host configuration protocol offer packet that has been transmitted from a dynamic host configuration protocol device of the system from being forwarded to the client device pending the client device being determined to be authorized to access the network;
• and
• in response to determining that the boot storage network access key, which has been stored in the memory partition in the device boot memory space, has been signed by the key exchange key that has been stored in the network switch boot memory space, authorizing the client device to access the network by unblocking the dynamic host configuration protocol offer packet, wherein the unblocking comprises forwarding the dynamic host configuration protocol offer packet to the client device.