System and method for speed dialing information handling system configuration changes
View Patent ↗Methods and systems for receiving speed dial configuration changes may involve receiving a packet, determining whether the packet is associated with a valid command, determining whether a username in a header of the packet is a valid user, validating a signature using a public key, decrypting encrypted data using a first factor key, and executing the valid command associated with the decrypted data. The packet includes the header, encrypted data, and the signature, and is sent without a one-to-many management console and without prior group configuration. The validation of the signature may be based on the determination that the packet is associated with a valid command and that the username in the header of the packet is a valid user.
1. A method for receiving speed dial configuration changes, comprising:
receiving a packet sent to a group without a one-to-many management console and without prior configuration of the group, wherein the packet includes a header, encrypted data, and a signature;
determining whether the packet is associated with a valid command;
determining whether a username in the header of the packet is a valid user;
validating the signature of the packet using a public key based on the determination that the packet is associated with a valid command and that the username in the header of the packet is a valid user;
decrypting the encrypted data from the packet using a first factor symmetric key wherein the first factor symmetric key was derived using the username and a password; and
executing the valid command associated with the decrypted data.
2. The method of claim 1 , wherein the valid command includes at least one of:
a power-down command;
a power-up command;
a firmware update command;
a PXE boot command;
a power capacity command;
a power supply command; and
a fan speed command.
3. The method of claim 1 , wherein determining whether the packet is associated with a valid command further comprises comparing a command identifier in the header of the packet to a whitelist of commands.
4. The method of claim 1 , wherein the valid command includes a command identifier and command data extracted from the decrypted data.
5. The method of claim 1 , further comprising:
verifying a checksum in the decrypted data; and
verifying a length value in the decrypted data by comparing a length of the decrypted data to the length value.
6. An information handling system, comprising:
a processor subsystem comprising a primary hardware processor having access to a first memory;
a management controller comprising a secondary hardware processor having access to a second memory, the second memory including an embedded storage partition and the second memory storing instructions executable by the secondary hardware processor to:
receive a packet sent to a group without a one-to-many management console and without prior configuration of the group, wherein the packet includes a header, encrypted data, and a signature;
determine whether the packet is associated with a valid command; determine whether a username in the header of the packet is a valid user;
validate the signature of the packet using a public key based on the determination that the packet is associated with a valid command and that the username in the header of the packet is a valid user;
decrypt the encrypted data from the packet using a first factor symmetric key wherein the first factor symmetric key was derived using the username and a password; and
execute the valid command associated with the decrypted data.
7. The information handling system of claim 6 , wherein the valid command includes at least one of:
a power-down command;
a power-up command;
a firmware update command;
a PXE boot command;
a power capacity command;
a power supply command; and
a fan speed command.
8. The information handling system of claim 6 , wherein the instructions to determine whether the packet is associated with a valid command further comprises instructions to compare a command identifier in the header of the packet to a whitelist of commands.
9. The information handling system of claim 6 , wherein the valid command includes a command identifier and command data extracted from the decrypted data.
10. The information handling system of claim 6 , further comprising instructions executable by the secondary hardware processor to:
verify a checksum in the decrypted data; and
verify a length value in the decrypted data by comparing a length of the decrypted data to the length value.
11. The information handling system of claim 6 , further comprising instructions executable by the secondary hardware processor to determine whether the packet targets a device in the information handling system based on a device identifier in the decrypted data and execution of the valid command further comprising execution of the valid command for the targeted device based on the determination that the decrypted data targets a device.
12. A management controller for an information handling system having a primary hardware processor and a primary memory, the management controller comprising:
a secondary hardware processor having access to a second memory, the second memory including an embedded storage partition and the second memory storing instructions executable by the secondary hardware processor to:
receive a packet sent to a group without a one-to-many management console and without prior configuration of the group, wherein the packet includes a header, encrypted data, and a signature;
determine whether the packet is associated with a valid command; determine whether a username in the header of the packet is a valid user; validate the signature of the packet using a public key based on the determination that the packet is associated with a valid command and that the username in the header of the packet is a valid user;
decrypt the encrypted data from the packet using a first factor symmetric key wherein the first factor symmetric key was derived using the username and a password; and
execute the valid command associated with the decrypted data.
13. The management controller of claim 12 , wherein the valid speed dial command includes at least one of:
a power-down command;
a power-up command;
a firmware update command;
a PXE boot command;
a power capacity command;
a power supply command; and
a fan speed command.
14. The management controller of claim 12 , wherein the instructions to determine whether the packet is associated with a valid command further comprises instructions to compare a command identifier in the header of the packet to a whitelist of commands.
15. The management controller of claim 12 , wherein the valid command includes a command identifier and command data extracted from the decrypted data.
16. The management controller of claim 12 , further comprising instructions executable by the secondary hardware processor to:
verify a checksum in the decrypted data; and
verify a length value in the decrypted data by comparing a length of the decrypted data to the length value.
17. The management controller of claim 12 , further comprising instructions executable by the secondary hardware processor to determine whether the packet targets a device of the information handling system based on a device identifier in the decrypted data and execution of the valid command further comprising execution of the valid command for the targeted device based on the determination that the decrypted data targets a device.