Method and apparatus for automatic and secure distribution of an asymmetric key security credential in a utility computing environment

An automated asymmetric key security credential distributor system for a utility computing environment (UCE) comprising:

• an asymmetric key generator for generating an asymmetric key, wherein the asymmetric key is stored at a management server;
• a logical device identifier coupler for coupling the asymmetric key with a logical device identifier of a provisionable resource capable of being provisioned by the UCE;
• an isolated asymmetric key security credential distribution virtual network establisher for automatically establishing an isolated asymmetric key security credential distribution virtual network only between the management server and the provisionable resource;
• an asymmetric key provider for providing the asymmetric key from the management server to the provisionable resource within the isolated asymmetric key security credential distribution virtual network without requiring the provisionable resource to request the asymmetric key;
• and
• a virtual network dissolver for dissolving the isolated asymmetric key security credential distribution virtual network only between the management server and the provisionable resource after the asymmetric key is provided to said provisionable resource within the isolated asymmetric key security credential distribution virtual network, wherein the generator, the coupler, the establisher, the provider and the dissolver execute prior to provisioning the provisionable resource to a user.

A non-transitory computer-usable medium having computer-readable program code embodied therein for causing a method for automatic, secure, and confidential distribution of an asymmetric key security credential in a utility computing environment (UCE) comprising:

• establishing an asymmetric key at a management server;
• associating the asymmetric key with a logical device identifier of a provisionable resource capable of being provisioned by the UCE;
• automatically establishing an isolated asymmetric key security credential distribution virtual network only between the management server and the provisionable resource;
• providing the asymmetric key from the management server to the provisionable resource within the isolated asymmetric key security credential distribution virtual network without requiring the provisionable resource to request the provisionable resource;
• and
• dissolving the isolated asymmetric key security credential distribution virtual network only between the management server and the provisionable resource after the asymmetric key is provided to said provisionable resource within the isolated asymmetric key security credential distribution virtual network, wherein the establishing of the asymmetric key, the associating, the automatically establishing of the isolated asymmetric key security credential distribution virtual network, the providing and the dissolving are performed prior to provisioning the provisionable resource to a user.

A utility computing environment comprising:

• a plurality of information technology (IT) compute resources and connections coupled with said plurality of IT compute resources;
• with each of said plurality of IT compute resources represented in a machine-readable map;
• a management server coupled with said plurality of IT compute resources, said management server configured to automatically distribute asymmetric key security credentials for said IT compute resources within a data center;
• an asymmetric key generator for generating an asymmetric key at said management server;
• a logical device identifier coupler for coupling the asymmetric key with a logical device identifier of a provisionable resource of the plurality of IT compute resources capable of being provisioned by the UCE;
• an isolated asymmetric key security credential distribution virtual network establisher for automatically establishing an isolated asymmetric key security credential distribution virtual network only between the management server and the provisionable resource;
• an asymmetric key provider for providing the asymmetric key from the management server to the provisionable resource within the isolated asymmetric key security credential distribution virtual network without requiring the provisionable resource to request the asymmetric key;
• and
• a virtual network dissolver for dissolving the isolated asymmetric key security credential distribution virtual network only between the management server and the provisionable resource after the asymmetric key is provided to said provisionable resource within the isolated asymmetric key security credential distribution virtual network, wherein the generator, the coupler, the establisher, the provider and the dissolver execute prior to provisioning the provisionable resource to a user.