Maintenance of access for security enablement on a host system
AssigneeInternational Business Machines Corporation
InventorsRoger G. Hathorn, Patricia G. Driever, Christopher J. Colonna, Evan Rivera, John R. Flanagan
Life of this patent
Estimating the term…
Abstract
A host port is enabled for security. In response to a determination by the host port that authentication or security association negotiation with a storage port cannot be completed successfully, the host port determines whether an audit mode indicator has been enabled in a login response from the storage port. The host port preserves input/output (I/O) access to the storage port based on determining whether the audit mode indicator has been enabled in the login response from the storage port.
Claims24
A method, comprising:
- enabling a host port for security;
- and
- in response to determining that an audit mode indicator has been enabled in a login response from a storage port, performing, by the host port, input/output (I/O) to the storage port, wherein the audit mode indicator being enabled overrides a requirement to complete authentication or security negotiation with the storage port, and wherein the host port while in an audit mode, continues to access a storage device via the storage port, and provides one or more tools to audit a security state of connections.
A system, comprising:
- a memory;
- and
- a processor coupled to the memory, wherein the processor performs operations, the operations comprising:
- enabling a host port for security;
- and
- in response to determining that an audit mode indicator has been enabled in a login response from a storage port, performing, by the host port, input/output (I/O) to the storage port, wherein the audit mode indicator being enabled overrides a requirement to complete authentication or security negotiation with the storage port, and wherein the host port while in an audit mode, continues to access a storage device via the storage port, and provides one or more tools to audit a security state of connections.
A computer program product, the computer program product comprising a computer readable storage medium having computer readable program code embodied therewith, the computer readable program code configured to perform operations, the operations comprising:
- enabling a host port for security;
- and
- in response to determining that an audit mode indicator has been enabled in a login response from a storage port, performing, by the host port, input/output (I/O) to the storage port, wherein the audit mode indicator being enabled overrides a requirement to complete authentication or security negotiation with the storage port, and wherein the host port while in an audit mode, continues to access a storage device via the storage port, and provides one or more tools to audit a security state of connections.
A data structure implemented in a memory of a device, the data structure comprising:
- a security bit, wherein the security bit enables a host port for security;
- and
- an audit mode indicator, wherein configuration of the audit mode indicator is used by the device to perform operations, the operations comprising:
- in response to determining that an audit mode indicator has been enabled in a login response from a storage port, performing, by the host port, input/output (I/O) to the storage port, wherein the audit mode indicator being enabled overrides a requirement to complete authentication or security negotiation with the storage port, and wherein the host port while in an audit mode, continues to access a storage device via the storage port, and provides one or more tools to audit a security state of connections.
Dependencies are inferred from the claim text.