Managing entitlement to use software by components of a data processing system
Methods and systems for managing operations of a data processing system are disclosed. To manage operations of the data processing system, an identification may be made that a channel card of the data processing system is a non-standard channel card configured to perform at least one non-standard function. Based on the identification, a management controller of the data processing system may obtain a signed data structure indicating an entitlement for the channel card, the signed data structure including a signature usable to verify the channel card is entitled to use of proprietary software. The management controller may perform a verification process to determine whether the signed data structure is usable to establish the entitlement via at least an out-of-band interaction with a remote system. If the signed data structure is usable to establish the entitlement, computer-implemented services may be provided using the channel card and the proprietary software.
1 . A method for managing operation of a data processing system, the method comprising:
making an identification that a channel card of the data processing system is a non-standard channel card, the non-standard channel card being configured to perform at least one non-standard function;
based on the identification:
obtaining, by a management controller of the data processing system, a signed data structure indicating an entitlement for the channel card, the signed data structure comprising a signature usable to verify the channel card is entitled to use of proprietary software;
performing, by the management controller and via at least an out-of-band interaction with a remote system, a verification process to determine whether the signed data structure is usable to establish the entitlement; and
in an instance of the verification process in which the signed data structure is usable to establish the entitlement:
providing, using the channel card and the proprietary software, computer-implemented services,
wherein obtaining the signed data structure comprises:
providing, by the management controller, a request to the channel card, the request challenging the channel card to demonstrate entitlement to use of the proprietary software; and
obtaining, from the channel card, a response, the response comprising the signed data structure signed using a private key of a public private key pair maintained by the channel card.
2 . The method of claim 1 , wherein performing the verification process comprises:
sending, by the management controller, the signed data structure to the remote system via an out-of-band communication channel; and
receiving, from the remote system and via the out-of-band communication channel, a response indicating whether the signed data structure is usable to establish the entitlement.
3 . The method of claim 1 , wherein the entitlement dictates a type of proprietary software that the channel card is entitled to use, and the type of proprietary software dictates which non-standard functions of the channel card are allowed to be invoked by the data processing system.
4 . The method of claim 1 , wherein use of the proprietary software is controlled exclusively by the remote system.
5 . The method of claim 1 , wherein the remote system is a system operated by a manufacturer of the channel card.
6 . The method of claim 1 , wherein the management controller is separate from and tasked with managing operation of hardware resources, the hardware resources comprising at least the channel card.
7 . The method of claim 1 , wherein the obtaining is performed via sideband channels of the data processing system.
8 . The method of claim 1 , wherein the non-standard function of the channel card is based on standard functions of a type of channel card, and the standard functions of the type of the channel card are based on an industry standard with which the channel card is compliant.
9 . The method of claim 8 , wherein the non-standard function is a capability of the channel card that is additional to those of the industry standard, and is not natively invokable by hardware resources and software hosted thereon.
10 . The method of claim 1 , wherein the identification is made by a basic input/output system (BIOS) of the data processing system during a startup procedure for the data processing system.
11 . A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for managing operation of a data processing system, the operations comprising:
making an identification that a channel card of the data processing system is a non-standard channel card, the non-standard channel card being configured to perform at least one non-standard function;
based on the identification:
obtaining, by a management controller of the data processing system, a signed data structure indicating an entitlement for the channel card, the signed data structure comprising a signature usable to verify the channel card is entitled to use of proprietary software;
performing, by the management controller and via at least an out-of-band interaction with a remote system, a verification process to determine whether the signed data structure is usable to establish the entitlement; and
in an instance of the verification process in which the signed data structure is usable to establish the entitlement:
providing, using the channel card and the proprietary software, computer-implemented services,
wherein obtaining the signed data structure comprises:
providing, by the management controller, a request to the channel card, the request challenging the channel card to demonstrate entitlement to use of the proprietary software; and
obtaining, from the channel card, a response, the response comprising the signed data structure signed using a private key of a public private key pair maintained by the channel card.
12 . The non-transitory machine-readable medium of claim 11 , wherein performing the verification process comprises:
sending, by the management controller, the signed data structure to the remote system via an out-of-band communication channel; and
receiving, from the remote system and via the out-of-band communication channel, a response indicating whether the signed data structure is usable to establish the entitlement.
13 . The non-transitory machine-readable medium of claim 11 , wherein the entitlement dictates a type of proprietary software that the channel card is entitled to use, and the type of proprietary software dictates which non-standard functions of the channel card are allowed to be invoked by the data processing system.
14 . The non-transitory machine-readable medium of claim 11 , wherein use of the proprietary software is controlled exclusively by the remote system.
15 . The non-transitory machine-readable medium of claim 11 , wherein the remote system is a system operated by a manufacturer of the channel card.
16 . The non-transitory machine-readable medium of claim 11 , wherein the management controller is separate from and tasked with managing operation of hardware resources, the hardware resources comprising at least the channel card.
17 . A data processing system, comprising:
a processor; and
a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform operations for managing operation of a data processing system, the operations comprising:
making an identification that a channel card of the data processing system is a non-standard channel card, the non-standard channel card being configured to perform at least one non-standard function;
based on the identification:
obtaining, by a management controller of the data processing system, a signed data structure indicating an entitlement for the channel card, the signed data structure comprising a signature usable to verify the channel card is entitled to use of proprietary software;
performing, by the management controller and via at least an out-of-band interaction with a remote system, a verification process to determine whether the signed data structure is usable to establish the entitlement; and
in an instance of the verification process in which the signed data structure is usable to establish the entitlement:
providing, using the channel card and the proprietary software, computer-implemented services,
wherein obtaining the signed data structure comprises:
providing, by the management controller, a request to the channel card, the request challenging the channel card to demonstrate entitlement to use of the proprietary software; and
obtaining, from the channel card, a response, the response comprising the signed data structure signed using a private key of a public private key pair maintained by the channel card.
18 . The data processing system of claim 17 , wherein performing the verification process comprises:
sending, by the management controller, the signed data structure to the remote system via an out-of-band communication channel; and
receiving, from the remote system and via the out-of-band communication channel, a response indicating whether the signed data structure is usable to establish the entitlement.
19 . The data processing system of claim 17 , wherein the entitlement dictates a type of proprietary software that the channel card is entitled to use, and the type of proprietary software dictates which non-standard functions of the channel card are allowed to be invoked by the data processing system.
20 . The data processing system of claim 17 , wherein use of the proprietary software is controlled exclusively by the remote system.