Out of band vital product data collection

Patent metadata

Field	Value
Publication number	US-9245113-B2
Application number	US-90998910-A
Country	US
Kind code	B2
Filing date	Oct 22, 2010
Priority date	Oct 22, 2010
Publication date	Jan 26, 2016
Grant date	Jan 26, 2016

Abstract

A vital product data (VPD) system is connected to a network, allowing the VPD system to be accessed for inquiries about VPD. The VPD system includes a baseboard management controller (BMC), a VPD cache, a platform initialization system and a tamper detection switch. The BMC communicates with the tamper detection switch and sets a VPD flag to false when tampering is detected. Queries to the BMC through the network for VPD are then held pending and the VPD cache refreshed with a no-boot power on, using the platform initialization system to collect the new VPD capturing the nature of any modifications after tampering.

First claim

What is claimed is:

1. A method comprising:
detecting, by a baseboard management controller on a first server, a tamper-induced change to a physical configuration of the first server, wherein the baseboard management controller comprises a module of computer program instructions communicating with a second server;
invalidating, by the baseboard management controller, a vital product data cache, wherein the vital product data cache comprises computer memory in the first server;
updating, by the baseboard management controller, the vital product data cache to reflect changes to the physical configuration of the first server without booting the first server;
receiving a power off request during the updating the vital product data cache; and
allowing, by the baseboard management controller, the updating the vital product data cache to complete before powering off the first server.

2. A method of claim 1 , further comprising receiving, from the second server by the baseboard management controller, a request for vital product data and, if the vital product data cache is invalidated, communicating, by the baseboard management controller, a data pending message.

3. A method of claim 2 , further comprising continuing to communicate the data pending request is until updating the vital product data cache is completed.

4. A method of claim 3 , further comprising reporting the updated vital product data cache.

5. A method of claim 3 , wherein detecting the tamper-induced change includes detecting when a tamper detection switch is set.

6. A method of claim 5 , wherein the tamper detection switch is set when a cover is opened on the first server.

7. A method of claim 5 , further comprising determining, by the baseboard management controller, if the first server is on and setting a no-boot flag to true if the first server is not on.

8. A method of claim 7 , wherein updating without booting the first server is in response to detecting the no-boot flag is true.

9. A method of claim 8 , further comprising setting, by the baseboard management controller, the no-boot flag to false when updating the vital product data cache is complete.

10. A method of claim 7 , wherein invalidating the vital product data cache includes setting a vital product data flag to false.

11. A method of claim 10 , further comprising setting, by the baseboard management controller, the vital product data flag to true in response to updating the vital product data cache.

12. A method of claim 1 , wherein updating the vital product data cache includes at least partially powering on the first server.

13. A computer program product comprising at least one computer-readable storage medium having computer-readable program code portions stored therein, the computer-readable program code portions comprising:
a first executable portion configured to detect a tamper-induced change to physical a configuration of a first server;
a second executable portion configured to invalidate a vital product data cache, wherein the vital product data cache comprises computer memory in the first server;
a third executable portion configured to update the vital product data cache to reflect changes to the physical configuration of the first server without booting the first server; and
a fourth executable portion configured to receive a power off request during the updating the vital product data cache; and
a fifth executable portion configured to allow the updating the vital product data cache to complete before powering off the first server.

14. A computer program product of claim 13 , further comprising a sixth executable portion configured to receive a request from the second server for vital product data and, if the vital product data cache is invalidated, communicate a data pending message.

15. A computer program product of claim 14 , further comprising a seventh executable portion configured to continue communicating the data pending request is until updating the vital product data cache is completed.

16. A computer program product of claim 15 , further comprising a eighth executable portion configured to invalidate the vital product data cache when a tamper detection switch is set.

17. A computer program product of claim 16 , further comprising an ninth executable portion configured to determine if the first server is on, set a no-boot flag to true if the first server is not on and update without booting the first server in response to detecting the no-boot flag is true.

18. A computer program product of claim 17 , further comprising a tenth executable portion configured to set the no-boot flag to false when updating the vital product data cache is complete.

19. A computer program product of claim 16 , further comprising a eleventh executable portion configured to set a vital product data flag, indicating whether the vital product data is valid, to false.

20. A computer program product of claim 19 , further comprising an twelfth executable portion configured to set the vital product data flag to true in response to updating the vital product data cache.

Assignees

• Bealkowski Richard
• Lenovo Entpr Solutions Singapore Pte Ltd

Inventors

• Bealkowski Richard

Classifications

• G06F21/88

  Detecting or preventing theft or loss · CPC title

• G06F21/86

  Secure or tamper-resistant housings · CPC title

• G06F21/575

  Secure boot · CPC title

• G06F21/55 Primary

  Detecting local intrusion or implementing counter-measures · CPC title

• G06F21/87

  by means of encapsulation, e.g. for integrated circuits · CPC title