Systems and methods for providing authentication using a managed input/output port

1. An information handling system comprising:

a processor;

an input/output port communicatively coupled to the processor and configured to receive an external input/output device and communicatively couple the external input/output device to one or more information handling resources of the information handling system; and

an access controller communicatively coupled to the processor and configured to:

provide out-of-band management of the information handling system via a communications channel separate from and physically isolated from a network interface for in-band communication between the processor and an external network;

responsive to detecting an attempt to perform any management operation selected from a group of management operations requiring an administrator physically present at the information handling system:

determine if the external input/output device is coupled to the input/output port; and

determine if the external input/output device is authenticated as a trusted input/output device;

responsive to determining that the external input/output device is authenticated as a trusted input/output device, allow execution of the attempted management operation; and

responsive to determining that the external input/output device is not coupled to the input/output port, disallow execution of the attempted management operation;

wherein the group of management operations requiring the administrator physically present at the information handling system includes:

powering off the information handling system via a power button;

booting to basic input/output system option read-only memories;

booting to a boot manager;

booting to pre-operating system environment;

provisioning the information handling system from a local user interface via a liquid crystal display screen for remote management purposes;

booting from an operating system stored on an external storage medium;

configuring a baseboard management controller; and

automatically configuring information handling system settings with information stored on an external storage medium.

2. The information handling system of claim 1 , wherein the access controller is further configured to, responsive to determining that the external input/output device is not authenticated as a trusted input/output device, disallow execution of the attempted management operation.

3. The information handling system of claim 1 , wherein determining if the external input/output device coupled to the input/output port is authenticated as a trusted input/output device comprises:

comparing a unique identifier of the external input/output device to a list of trusted input/output devices stored on a computer-readable medium accessible to the access controller; and

determining the external input/output device to be authenticated if the unique identifier is present in the list of trusted input/output devices.

4. The information handling system of claim 1 , the access controller further configured to:

determine if the attempted management operation is an authorized attempted management operation associated with the external input/output device; and

responsive to determining that the external input/output device is authenticated as a trusted input/output device and that the attempted management operation is an authorized attempted management operation associated with the external input/output device, allow execution of the attempted management operation.

5. The information handling system of claim 4 , wherein determining if the attempted management operation is an authorized attempted management operation associated with the external input/output device comprises:

referencing a list of unique identifiers of trusted input/output devices stored on a computer-readable medium accessible to the access controller, wherein for each unique identifier, the list sets forth authorized management operations associated with such unique identifier; and

determining the attempted management operation to be authorized if the list indicates that the attempted management operation is associated with the unique identifier of the external input/output device.

6. The information handling system of claim 1 , wherein the input/output port is configured to receive input/output devices compliant with the Universal Serial Bus standard.

7. The information handling system of claim 1 , wherein determining if the external input/output device coupled to the input/output port is authenticated as a trusted input/output device comprises:

reading an unencrypted unique identifier and an encrypted unique identifier from the external input/output device;

encrypting the unencrypted unique identifier;

comparing a result of encrypting the unencrypted unique identifier to the encrypted unique identifier read from the external input/output device; and

determining the external input/output device to be authenticated if the result of encrypting the unencrypted unique identifier matches the encrypted unique identifier read from the external input/output device.

8. The information handling system of claim 7 , wherein encrypting the unencrypted unique identifier comprises encrypting the unencrypted unique identifier with a key unique to the information handling system.

9. The information handling system of claim 8 , wherein the encrypted unique identifier read from the external input/output device is generated by encrypting the unencrypted unique identifier with the key.