Data center asset client module authentication via a connectivity management authentication operation

Patent metadata

Field	Value
Publication number	US-12003382-B2
Application number	US-202217875607-A
Country	US
Kind code	B2
Filing date	Jul 28, 2022
Priority date	Jul 28, 2022
Publication date	Jun 4, 2024
Grant date	Jun 4, 2024

Abstract

A system, method, and computer-readable medium are disclosed for performing a data center connectivity management operation. The connectivity management operation includes: providing a data center asset with a data center asset client module and an embedded data center asset client module; establishing a secure communication channel between the connectivity management system client and a connectivity management system; exchanging information between the connectivity management system client and the connectivity management system via the secure communication channel between the connectivity management system client and the connectivity management system, the information including a data center asset client module authentication request; authenticating the data center asset client module in response to the data center asset module authentication request; and, configuring software in the data center asset in response to authentication of the data center asset client module.

First claim

What is claimed is:

1. A computer-implementable method for performing a data center connectivity management operation, comprising:
providing a data center asset with a data center asset client module and an embedded data center asset client module;
establishing a secure communication channel between a connectivity management system client and a connectivity management system, the connectivity management system comprising a connectivity management system aggregator, the connectivity management system aggregator interacting with the data center asset client module to establish a trusted state and a claimed state between the data center asset and the connectivity management system, the trusted state indicating a channel of communication between the data center asset and the connectivity management system is guaranteed, the claimed state indicating the data center asset can be authenticated and bound to a user;
exchanging information between the connectivity management system client and the connectivity management system via the secure communication channel between the connectivity management system client and the connectivity management system, the information including a data center asset client module authentication request;
authenticating the data center asset client module in response to the data center asset module authentication request; and,
configuring software in the data center asset in response to authentication of the data center asset client module.

2. The method of claim 1 , wherein:
the data center asset includes a baseboard management controller; and,
the embedded data center asset client module is installed on the baseboard management controller.

3. The method of claim 2 , wherein:
authentication of the data center asset client module takes into account the embedded data center asset client module being installed on the baseboard management controller.

4. The method of claim 1 , further comprising:
installing the software onto the data center asset via the data center asset client module.

5. The method of claim 1 , wherein:
a software automation service provides software components for installation on the data center asset.

6. The method of claim 1 , wherein:
a connectivity management system authentication service provides the authentication information to the data center asset.

7. A system comprising:
a processor;
a data bus coupled to the processor;
a connectivity management system client; and,
a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for:
providing a data center asset with a data center asset client module and an embedded data center asset client module;
establishing a secure communication channel between a connectivity management system client and a connectivity management system, the connectivity management system comprising a connectivity management system aggregator, the connectivity management system aggregator interacting with the data center asset client module to establish a trusted state and a claimed state between the data center asset and the connectivity management system, the trusted state indicating a channel of communication between the data center asset and the connectivity management system is guaranteed, the claimed state indicating the data center asset can be authenticated and bound to a user;
exchanging information between the connectivity management system client and the connectivity management system via the secure communication channel between the connectivity management system client and the connectivity management system, the information including a data center asset client module authentication request;
authenticating the data center asset client module in response to the data center asset module authentication request; and,
configuring software in the data center asset in response to authentication of the data center asset client module.

8. The system of claim 7 , wherein:
the data center asset includes a baseboard management controller; and,
the embedded data center asset client module is installed on the baseboard management controller.

9. The system of claim 8 , wherein:
authentication of the data center asset client module takes into account the embedded data center asset client module being installed on the baseboard management controller.

10. The system of claim 7 , wherein the instructions executable by the processor are further configured for:
installing the software onto the data center asset via the data center asset client module.

11. The system of claim 7 , wherein:
a software automation service provides software components for installation on the data center asset.

12. The system of claim 7 , wherein:
a connectivity management system authentication service authentication provides the information to the data center asset.

13. A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:
providing a data center asset with a data center asset client module and an embedded data center asset client module;
establishing a secure communication channel between a connectivity management system client and a connectivity management system, the connectivity management system comprising a connectivity management system aggregator, the connectivity management system aggregator interacting with the data center asset client module to establish a trusted state and a claimed state between the data center asset and the connectivity management system, the trusted state indicating a channel of communication between the data center asset and the connectivity management system is guaranteed, the claimed state indicating the data center asset can be authenticated and bound to a user;
exchanging information between the connectivity management system client and the connectivity management system via the secure communication channel between the connectivity management system client and the connectivity management system, the information including a data center asset client module authentication request;
authenticating the data center asset client module in response to the data center asset module authentication request; and,
configuring software in the data center asset in response to authentication of the data center asset client module.

14. The non-transitory, computer-readable storage medium of claim 13 , wherein:
the data center asset includes a baseboard management controller; and,
the embedded data center asset client module is installed on the baseboard management controller.

15. The non-transitory, computer-readable storage medium of claim 14 , wherein:
authentication of the data center asset client module takes into account the embedded data center asset client module being installed on the baseboard management controller.

16. The non-transitory, computer-readable storage medium of claim 13 , wherein the computer executable instructions are further configured for:
installing the software onto the data center asset via the data center asset client module.

17. The non-transitory, computer-readable storage medium of claim 13 , wherein:
a software automation service provides software components for installation on the data center asset.

18. The non-transitory, computer-readable storage me

Assignees

• Dell Products Lp

Inventors

• Prunier Dominique
• Atkinson Christopher
• Williams Eric
• Earley Damon G
• Jreij Elie A
• Young Susan E

Classifications

• H04L41/12 Primary

  Discovery or management of network topologies · CPC title

• H04L41/0803

  Configuration setting · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L41/28

  Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration · CPC title

• H04L41/082

  the condition being updates or upgrades of network functionality · CPC title