# US 2018/0006827 A1 · Automated propagation of server configuration on a server cluster > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0006827 A1 - Document ID: US20180006827A1 - Status: Published application - Kind: A1 - Application number: 15/238,561 - Filed: 2016-08-16 - Published: 2018-01-04 - Earliest claimed: 2016-06-30 - Assignees: Symantec Corporation - Applicants: Symantec Corporation - Inventors: Alok NAIK - Web page: https://patentgrep.com/patent/US20180006827A1 ## CPC - G06F 9/44505: {Configuring for program initiating, e.g. using registry, configuration files} - G06F 1/32: Means for saving power - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying} - H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]} - Y02D 10/00: Energy efficient computing, e.g. low power processors, power management or thermal management - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - Y02D: CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE ## Abstract Techniques are disclosed to automate secure propagation of a configuration to a plurality of servers in a server cluster. For example, the techniques may include a method. The method may include receiving, at a first computing device, a first public key associated with a target computing device, the first computing device having an updated configuration. The method may further include encrypting, at the first computing device, the updated configuration using the first public key. The method may further include sending the encrypted configuration to the target computing device. The method may further include decrypting, at the target computing device, the encrypted configuration using a first private key associated with the target computing device, wherein the first public key and the first private key are a first keypair associated with the target computing device. The method may further include updating the target computing device with the updated configuration. ## Claims ### Claim 1 A computer-implemented method for updating at least one target computing device of a plurality of computing devices having a shared configuration, the method comprising: receiving, at a first one of the computing devices, a first public key associated with a target computing device of the computing devices, the first computing device having an updated configuration; encrypting, at the first computing device, the updated configuration using the first public key; sending the encrypted configuration to the target computing device; decrypting, at the target computing device, the encrypted configuration using a first private key associated with the target computing device, wherein the first public key and the first private key are a first keypair associated with the target computing device; and updating the target computing device with the updated configuration. ### Claim 2 (depends on 1) The method of claim 1, wherein the shared configuration comprises a shared digital certificate, and wherein the updated configuration comprises an updated digital certificate. ### Claim 3 (depends on 2) The method of claim 2, further comprising: generating, at the first computing device, a second keypair comprising a second public key and a second private key associated with the first computing device; sending the second public key to a certificate device as part of a certificate signing request; and receiving, at the first computing device, the updated digital certificate from the certificate device based on the certificate signing request, wherein the updated configuration further comprises the second private key. ### Claim 4 (depends on 1) The method of claim 1, wherein sending the encrypted configuration to the target computing device comprises: sending the encrypted configuration directly from the first computing device to the target computing device. ### Claim 5 (depends on 1) The method of claim 1, wherein sending the encrypted configuration to the target computing device comprises: sending the encrypted configuration from the first computing device to a device; and sending the encrypted configuration from the device to the target computing device. ### Claim 6 (depends on 1) The method of claim 1, wherein sending the encrypted configuration to the target computing device comprises: encrypting the encrypted configuration data to generate further encrypted data using a third public key associated with a device, wherein the third public key is part of a third keypair comprising the third public key and a third private key associated with the device; sending the further encrypted data to the device; decrypting, by the device, the further encrypted data; and sending the encrypted configuration from the device to the target computing device. ### Claim 7 (depends on 1) The method of claim 1, wherein updating the target computing device with the updated configuration comprises a device controlling updating the target computing device with the updated configuration. ### Claim 8 (depends on 1) The method of claim 1, wherein updating the target computing device with the updated configuration comprises the target computing device controlling updating the target computing device with the updated configuration. ### Claim 9 (depends on 1) The method of claim 1, further comprising updating the plurality of computing devices with the updated configuration based on determining the plurality of computing devices have the shared configuration. ### Claim 10 (depends on 1) The method of claim 1, further comprising: encrypting, at the target computing device, the updated configuration using a second public key associated with a second target computing device of the plurality of computing devices, the second public key being part of a second key pair comprising the second public key and a second private key associated with the second target computing device; sending the encrypted configuration to the second target computing device; decrypting, at the second target computing device, the encrypted configuration using the second private key; and updating the second target computing device with the updated configuration. ### Claim 11 A computing system for updating at least one target computing device of a plurality of computing devices having a shared configuration, the computing system comprising: a first computing device comprising a memory and a processor configured to: receive a first public key associated with a target computing device, the first computing device having an updated configuration; encrypt the updated configuration using the first public key; send the encrypted configuration to the target computing device; a target computing device comprising a memory and a processor configured to: decrypt the encrypted configuration using a first private key associated with the target computing device, wherein the first public key and the first private key are a first keypair associated with the target computing device; and update the target computing device with the updated configuration. ### Claim 12 (depends on 11) The computing system of claim 11, wherein the shared configuration comprises a shared digital certificate, and wherein the updated configuration comprises an updated digital certificate. ### Claim 13 (depends on 12) The computing system of claim 12, wherein the processor of the first computing device is further configured to: generate a second keypair comprising a second public key and a second private key associated with the first computing device; send the second public key to a certificate device as part of a certificate signing request; and receive the updated digital certificate from the certificate device based on the certificate signing request, wherein the updated configuration further comprises the second private key. ### Claim 14 (depends on 11) The computing system of claim 11, wherein to send the encrypted configuration to the target computing device comprises: sending the encrypted configuration directly from the first computing device to the target computing device. ### Claim 15 (depends on 11) The computing system of claim 11, wherein to send the encrypted configuration to the target computing device comprises: sending the encrypted configuration from the first computing device to a device; and sending the encrypted configuration from the device to the target computing device. ### Claim 16 (depends on 11) The computing system of claim 11, wherein to send the encrypted configuration to the target computing device comprises: encrypting the encrypted configuration data to generate further encrypted data using a third public key associated with a device, wherein the third public key is part of a third keypair comprising the third public key and a third private key associated with the device; sending the further encrypted data to the device; decrypting, by the device, the further encrypted data; and sending the encrypted configuration from the device to the target computing device. ### Claim 17 (depends on 11) The computing system of claim 11, wherein to update the target computing device with the updated configuration comprises a device controlling updating the target computing device with the updated configuration. ### Claim 18 (depends on 11) The computing system of claim 11, wherein to update the target computing device with the updated configuration comprises the target computing device controlling updating the target computing device with the updated configuration. ### Claim 19 A non-transitory computer-readable medium comprising instructions that when executed by a computing device cause the computing device to perform a method for updating at least one target computing device of a plurality of computing devices having a shared configuration, the method comprising: receiving, at a first one of the computing devices, a first public key associated with a target computing device of the computing devices, the first computing device having an updated configuration; encrypting, at the first computing device, the updated configuration using the first public key; sending the encrypted configuration to the target computing device; decrypting, at the target computing device, the encrypted configuration using a first private key associated with the target computing device, wherein the first public key and the first private key are a first keypair associated with the target computing device; and updating the target computing device with the updated configuration.