Secure switching for downloading network boots

A service for managing a secure network boot of a server blade, the server blade being in a blade chassis that has multiple server blades, the blade chassis including a switching means allowing the server blade to communicate with a network, the service comprising:

• storing a list of trusted Dynamic Host Configuration Protocol (DHCP) servers in a management module on a server blade;
• broadcasting a DHCP DISCOVER request to a network of DHCP servers;
• receiving, at a switching means associated with the server blade, a DHCP OFFER message that is responsive to the DHCP DISCOVER request, wherein the DHCP OFFER message contains Internet Protocol (IP) addresses of responding DHCP servers, a Dynamic IP address with lease information, and a list of Pre-boot eXecution Environment (PXE) Boot Servers that can be contacted by the server blade to download a boot program, and wherein the DHCP OFFER comes from a responding DHCP server on the network of DHCP servers;
• comparing an identity of the responding DHCP server with the list of trusted DHCP server in the management module on the server blade;
• in response to verifying that the responding DHCP server is on the list of trusted DHCP servers, permitting the DHCP OFFER message to pass through to the server blade via an Ethernet switch that is coupled to the server blade, and downloading a boot program from a boot program server specified by the responding DHCP server;
• in response to determining that the responding DHCP server is not on the list of trusted DHCP servers, blocking the transmittal of the response from the responding DHCP server through the Ethernet switch to the server blade;
• and
• in response to determining that the responding DHCP server is not on the list of trusted DHCP servers, generating an alert to a designated administrator server of a presence of an unauthorized DHCP server on the network of DHCP servers.