Edge/cloud reversal security check

An apparatus comprising:

• a processor in a baseboard management controller (“BMC”) of an edge server at an edge location;
• and
• non-transitory computer readable storage media storing code, the code being executable by the processor to perform operations comprising:
• establishing a secure connection between the BMC and management software of a management server running on a cloud server, the management software managing the edge server through the BMC, wherein the secure connection is bidirectional;
• receiving a unique user identifier (“UUID”) of the management software and a public key from the management software, the public key corresponding to a private key at the management server;
• transmitting, from the BMC to a safety check module located on the management server, a request for information;
• transmitting, over the secure connection, the same request for information to the management software;
• receiving a safety check response from the safety check module and a management software response from the management software;
• comparing the safety check response and the management software response;
• and
• sending an alert signaling a security breach at the management software in response to the safety check response differing from the management software response.

A program product comprising a non-transitory computer readable storage medium storing code, the code being configured to be executable by a processor to perform operations comprising:

• establishing a secure connection between a baseboard management controller (“BMC”) of an edge server at an edge location and management software of a management server running on a cloud server, the management software managing the edge server through the BMC, wherein the secure connection is bidirectional;
• receiving a unique user identifier (“UUID”) of the management software and a public key from the management software, the public key corresponding to a private key at the management server;
• transmitting, from the BMC to a safety check module located on the management server, a request for information;
• transmitting, over the secure connection, the same request for information to the management software;
• receiving a safety check response from the safety check module and a management software response from the management software;
• and
• comparing the safety check response and the management software response;
• and
• sending an alert signaling a security breach at the management software in response to the safety check response differing from the management software response.