Security measures in a partitionable computing system

1. A method of protecting a system networking fabric of a partitionable computer system, wherein the system comprises cells, each including at least one processor, and wherein the cells are assigned to partitions and communication between cells in different partitions is restricted by the system networking fabric, the method comprising:

determining security status information related to a partition of the partitionable computer system indicating whether the partition is in a secure state running only trusted software or an unsecure state other than the secure state;

forming a data packet that comprises the security status information; and

transmitting the data packet from the partition to a component of the system networking fabric as final destination for use by the component of the system networking fabric for configuring the system networking fabric.

2. The method of claim 1 wherein the determining comprises accessing a register.

3. The method of claim 1 wherein the determining comprises receiving the security status information from a state machine separate from the at least one processor.

4. The method of claim 1 wherein the forming comprises:

constructing a portion of the data packet that comprises packet type information and a destination address to form a partial packet; and

appending the security status information to the partial packet.

5. The method of claim 1 further comprising:

receiving the data packet by the component of the system networking fabric;

reading the security status information by the component of the system networking fabric; and

performing a system function by the component of the system networking fabric in response to the security status information.

6. The method of claim 5 wherein the performing comprises allowing access to a system networking fabric register when the security status information indicates that the partition of the partitionable computer system is operating in a secure state.

7. The method of claim 5 wherein the performing comprises denying access to a system networking fabric register when the security status information indicates that the partition of the partitionable computer system is operating in an unsecured state.

8. The method of claim 7 wherein the denying access comprises ignoring the data packet.

9. The method of claim 7 further comprising sending a response to the partition indicative that the access to the system networking fabric register was denied.

10. A system for protecting a system networking fabric of a partitionable computer system, the computer system comprising

cells, each including a processor, wherein the cells are assigned to partitions and communication between cells in different partitions is restricted by the system networking fabric, the protecting system comprising:

the processor of one of the partitions of the partitionable computer system;

a packet former in communication with the processor configured to construct a data packet, the data packet comprising security status information indicating whether the partition is in a secure state running only trusted software or an unsecure state other than the secure state; and

a transmitter for transmitting the data packet from the partition to a component of the system networking fabric as final destination for use by the component of the system networking fabric for configuring the system networking fabric.

11. The system of claim 10 wherein the component of the system networking fabric comprises a routing device that is capable of receiving and using the security status information and content of the data packet to configure the routing device.

12. The system of claim 11 wherein the component of the routing device is a crossbar.

13. The system of claim 10 wherein the packet former is also in communication with a state machine separate from the processor that determines the security status information.

14. The system of claim 11 wherein the routing device is configured to receive the packet and perform a security function in response to the security status information.

15. The system of claim 14 wherein the security function comprises dropping the packet when the security status information indicates an unsecure status.

16. The system of claim 14 wherein the security function comprises denying access to a destination address of the packet when the security status information indicates an unsecure state.

17. The system of claim 14 wherein the routing device sends a response to the partition when the security function is performed.

18. The system of claim 17 wherein the response is an error message.

19. A system for protecting a system networking fabric of a partitionable computer system comprising:

cells, each including at least one processor, wherein the cells are assigned to partitions and communication between cells in different partitions is restricted by the system networking fabric;

a first means for determining security status information related to a partition of the partitionable computer system indicating whether the partition is in a secure state running only trusted software or an unsecure state other than the secure state;

a second means for forming a data packet that comprises the security status information; and

a third means for transmitting the data packet from the partition to a component of the system networking fabric as final destination for use by the component of the system networking fabric for configuring the system networking fabric.

20. The system of claim 19 further comprising a fourth means for transmitting the data packet to a component of the system networking fabric.

21. A method of protecting a system networking fabric of a partitionable computer system, wherein the system comprises cells, each including at least one processor, and wherein the cells are assigned to partitions and communication between cells in different partitions is restricted by the system networking fabric, the method comprising:

determining security status information related to a processor of a partition of the partitionable computer system indicating whether the processor is in a secure state running only trusted software or an unsecure state other than the secure state;

forming a data packet that comprises the security status information; and

transmitting the data packet from the processor to a component of the system networking fabric as final destination for use by the component of the system networking fabric for configuring the system networking fabric.

22. The method of claim 21 wherein the determining comprises receiving the security status information from a state machine separate from the at least one processor.

23. The method of claim 21 wherein the forming comprises:

constructing a portion of the data packet that comprises packet type information and a destination address to form a partial packet; and

appending the security status information to the partial packet.

24. The method of claim 21 further comprising:

receiving the data packet by the component of the system networking fabric;

reading the security status information by the component of the system networking fabric; and

performing a system function relating to configuring the system networking fabric in response to the security status information by the component of the system networking fabric.

25. The method of claim 24 wherein the performing comprises allowing access to a system networking fabric register when the security status information indicates that the processor of the partition is operating in a secured state.

26. The method of claim 24 wherein the performing comprises denying access to a system networking fabric register when the security status information indicates that the processor of the partitionable is operating in an unsecured state.

27. The method of claim 26 wherein the denying access comprises ignoring the data packet.

28. The method of claim 27 further comprising sending a response to the partition indicative that the access to the system networking fabric register was denied.

29. The method of claim 4 wherein the forming further comprises:

appending to the partial packet instructions to a component of the system networking fabric to perform a system configuration function.