Method for generating secure snapshots
AssigneeVMware, Inc.
InventorBhavesh Mehta
Life of this patent
Estimating the term…
Abstract
In a technique for creating a secure snapshot of a virtual machine, a guest operating system of the virtual machine is caused to enter a locked state prior to the snapshot of the virtual machine being created. When the snapshot is subsequently used to restore the virtual machine, the guest operating system of the virtual machine is restored in a locked state and credentials are required to access the guest operating system.
Claims18
A method for generating a snapshot of a virtual machine, comprising:
- receiving a trigger to generate the snapshot of the virtual machine;
- in response to the trigger, transmitting a first command to lock an operating system being executed by the virtual machine, wherein the first command is directed to the virtual machine and causes the virtual machine to execute one or more scripts included in the operating system to force the operating system into a locked state;
- and
- transmitting a second command to create the snapshot of the virtual machine,
- wherein, in the snapshot, the operating system executed by the virtual machine is in the locked state and protected by a login screen that requires credentials of an authorized user to be entered to access the operating system after the virtual machine is restored from the snapshot, and
- wherein the second command is transmitted after an acknowledgement is received that indicates the operating system is in the locked state.
A non-transitory computer readable storage medium storing instructions to be executed in a processing unit of a computer system, wherein the instructions when executed in the processing unit carry out the steps of:
- receiving a first command to force an operating system into a locked state;
- parsing one or more scripts included in the operating system to locate a script that, when executed, forces the operating system into the locked state;
- causing the script to be executed;
- and
- receiving an acknowledgement that the script has executed,
- wherein the operating system is executed by a virtual machine,
- wherein a snapshot is taken of the virtual machine responsive to a second command after the acknowledgement is received indicating the operating system is in the locked state, and
- wherein, in the snapshot, the operating system executed by the virtual machine is in the locked state and protected by a login screen that requires credentials of an authorized user to be entered to access the operating system after the virtual machine is restored from the snapshot.
A non-transitory computer readable storage medium storing instructions to be executed in a processing unit of a computer system, wherein the instructions when executed in the processing unit carry out the steps of:
- receiving a trigger to generate a snapshot of the virtual machine;
- transmitting, via one or more network packets, a first command and one or more scripts that, when received and processed by an operating system being executed by the virtual machine, forces the operating system into a locked state;
- and
- transmitting a second command to create the snapshot of the virtual machine,
- wherein, in the snapshot, the operating system executed by the virtual machine is in the locked state and protected by a login screen that requires credentials of an authorized user to be entered to access the operating system after the virtual machine is restored from the snapshot, and
- wherein the second command is transmitted after an acknowledgement is received that indicates the operating system is in the locked state.
A computer system comprising:
- a processor;
- and
- a memory comprising computer instructions that cause the processor to perform steps for generating a snapshot of a virtual machine, the steps comprising:
- receiving a trigger to generate the snapshot of the virtual machine,
- in response to the trigger, transmitting a first command to lock an operating system being executed by the virtual machine, and
- transmitting a second command to create the snapshot of the virtual machine,
- wherein, in the snapshot, the operating system executed by the virtual machine is in a locked state protected by a login screen that requires credentials of an authorized user to be entered, after the virtual machine is restored from the snapshot to an identical state to when the snapshot was created, to access the operating system, and
- wherein the second command is transmitted after an acknowledgement is received that indicates the operating system is in the locked state.
Dependencies are inferred from the claim text.