Automatic strong identity generation for cluster nodes
AssigneeMicrosoft Technology Licensing, LLC
InventorsNathan J. Ide, Magnus Nystrom
Life of this patent
Estimating the term…
Abstract
Aspects of the subject matter described herein relate to clusters. In aspects, an image is created to install software onto nodes of the cluster. A root secret of the cluster is injected into the image. After installing the software of the image onto a node of the cluster, the node may boot into a secure mode, detect that individualization is needed for the node to join a cluster, create an identity for authenticating with other nodes of the cluster, chain the identity via the root secret, and then securely erase the root secret from the node prior to assuming node duties. Among other things, this allows a single image to be used for installing software on all nodes of a cluster without the compromise of a single node compromising the entire cluster.
Claims20
A method for provisioning a node, the node implemented by a computer having a processor and memory, the method comprising:
- storing, by the computer in the memory, an image configured to install software on nodes of a cluster, the image having a payload encapsulating a root secret of the cluster;
- booting the node in a secure mode;
- detecting that individualization is needed for the node to join the cluster;
- creating an identity of the node using the root secret of the cluster, wherein the identity of the node is configured for authenticating with other nodes of the cluster and is chained to the root secret of the cluster;
- and
- prior to the node assuming node duties, securely erasing the root secret of the cluster from the memory to ensure that root secret of the cluster is no longer available to the node.
A computer storage device having memory storing computer-executable instructions which, when executed by a computer that implements a node, cause the computer to perform actions, comprising:
- storing, in the memory, an image configured to install software on nodes of a cluster, the image having a payload encapsulating a root secret of the cluster;
- and
- installing software on the node using the image, the software including instructions, when executed a first time on the node, causing the computer to perform additional actions, comprising:
- booting the node in a secure mode,
- detecting that individualization is needed for the node to join the cluster,
- creating an identity of the node using the root secret of the cluster, wherein the identity of the node is configured for authenticating with other nodes of the cluster and is chained to the root secret of the cluster, and
- prior to the node assuming node duties, securely erasing the root secret of the cluster from the memory to ensure that root secret of the cluster is no longer available to the node.
In a computing environment, a system, comprising:
- a memory for storing software obtained from an image, the image configured to install the software on any node of a cluster, the image including a payload encapsulating a root secret of the cluster;
- and
- one or more processors coupled to the memory, the one or more processors executing the software to perform actions comprising:
- booting a node in a secure mode,
- detecting that individualization is needed for the node to join the cluster,
- in response to detecting that individualization is needed, creating an identity of the node using the root secret of the cluster, wherein the identity of the node is configured for authenticating with other nodes of the cluster and is chained to the root secret of the cluster, and
- prior to the node assuming node duties, securely erasing the root secret from the memory to ensure that root secret of the cluster is no longer available to the node.
Dependencies are inferred from the claim text.