Vulnerability proofing of an edge compute endpoint while onboarding to an edge orchestrator

A method for vulnerability proofing an Information Handling System (IHS) while onboarding the IHS to an edge orchestrator as an edge compute endpoint, the vulnerability proofing implemented by a remote access controller of the IHS that provides remote management of the IHS, the method comprising:

• detecting onboarding of the IHS as the edge compute endpoint to the edge orchestrator comprising vulnerability management service instructions, the onboarding comprising configuring for one or more of a plurality of hardware components of the IHS;
• and
• executing the vulnerability management service instructions, comprising:
• accessing a plurality of catalogs specifying known vulnerabilities of hardware components of the IHS;
• determining whether any of the configuring of any of the one or more of the configurations for one or more of the plurality of hardware components of the IHS are identified as vulnerable in one or more of the catalogs;
• and
• blocking the onboarding of the IHS as the edge compute endpoint to the edge orchestrator by the IHS until the configuring of the one or more hardware components of the plurality of hardware components of the IHS is modified to include no configuring of the one or more hardware components of the plurality of hardware components of the IHS with vulnerabilities identified in the plurality of catalogs.

A remote access controller supporting remote management of an Information Handling System (IHS), the remote access controller comprising a memory device having instructions stored thereon that, upon execution by a logic unit, cause the remote access controller to:

• detect launch of onboarding of the IHS as an edge compute endpoint to an edge orchestrator that comprises vulnerability management service instructions;
• and
• execute the vulnerability management service instructions, which causes the remote access controller to:
• access a plurality of catalogs specifying known vulnerabilities of hardware components;
• determine whether the onboarding of the IHS as the edge compute endpoint to the edge orchestrator comprises configuring one or more of a plurality of hardware components of the IHS with a configuration identified as vulnerable in one or more of the catalogs;
• and
• block onboarding of the IHS as the edge compute endpoint to the edge orchestrator by the IHS until the configuring of one or more of the plurality of hardware components of the IHS with a configuration identified as vulnerable in one or more of the catalogs are modified to include no configurations with vulnerabilities identified in the plurality of catalogs.