Chassis-based cryptographic affinities
Cryptographic affinities are generated to improve security in data centers. When a blade server is hot swapped, the cryptographic affinities protect electronic data stored within the blade server. The cryptographic affinities are generated based on hashing a unique chassis identifier. If the blade server is installed in a different chassis, the cryptographic affinities lock out the different chassis from read, write, and other access operations. The cryptographic affinities may even require deleting or reformatting before rekeying is commenced.
1. A method of cryptographic security, comprising:
receiving, by an information handling system, a blade identifier that uniquely identifies a blade server installed in a chassis;
retrieving, by the information handling system, a chassis identifier that uniquely identifies the chassis;
hashing, by the information handling system, the blade identifier and the chassis identifier using an electronic representation of a hashing algorithm to generate a cryptographic affinity that uniquely identifies the blade server installed in the chassis;
comparing the cryptographic affinity to a previously generated value; and
permitting a read/write access to electronic data stored by the blade server in response to the cryptographic affinity matching the previously generated value.
2. The method of claim 1 , further comprising storing the cryptographic affinity in an electronic database.
3. The method of claim 1 , further comprising storing the cryptographic affinity in the electronic database, the electronic database electronically associating the cryptographic affinity and the blade identifier.
4. The method of claim 1 , further comprising storing the cryptographic affinity in the electronic database, the electronic database electronically associating the cryptographic affinity and the chassis identifier.
5. The method of claim 1 , further comprising storing the cryptographic affinity in an electronic database, the electronic database electronically associating the cryptographic affinity to the blade identifier and to the chassis identifier.
6. An apparatus, comprising:
a hardware processor; and
a memory device, the memory device storing instructions, the instructions when executed causing the hardware processor to perform operations including:
receiving a blade identifier sent from a blade server installed in a chassis the blade identifier uniquely identifying the blade server;
retrieving a chassis identifier that uniquely identities the chassis having the blade server installed therein;
hashing the blade identifier and the chassis identifier using an electronic representation of a hashing algorithm to generate a cryptographic affinity that uniquely identifies the blade server installed in the chassis;
comparing the cryptographic affinity to a previously generated value; and
permitting a read/write access to electronic data stored by the blade server in response to the cryptographic affinity matching the previously generated value.
7. The system of claim 6 , wherein the operations further comprise storing the cryptographic affinity in an electronic database.
8. The system of claim 6 , wherein the operations further comprise storing the cryptographic affinity in the electronic database, the electronic database electronically associating the cryptographic affinity and the blade identifier.
9. The system of claim 6 , wherein the operations further comprise storing the cryptographic affinity in the electronic database, the electronic database electronically associating the cryptographic affinity and the chassis identifier.
10. The system of claim 6 , wherein the operations further comprise storing the cryptographic affinity in the electronic database, the electronic database electronically associating the cryptographic affinity to the blade identifier and to the chassis identifier.
11. The system of claim 6 , wherein the operations further comprise receiving a request for the read/write access to the electronic data stored by the blade server.
12. A memory device storing instructions that when executed cause a hardware processor to perform operations, the operations comprising:
receiving a blade identifier sent from a blade server installed in a chassis, the blade identifier uniquely identifying the blade server;
retrieving a chassis identifier that uniquely identifies the chassis having the blade server installed therein;
hashing the blade identifier and the chassis identifier using an electronic representation of a hashing algorithm to generate a cryptographic affinity that uniquely identifies the blade server installed in the chassis;
comparing the cryptographic affinity to a previously generated value; and
permitting read/write access to electronic data stored by the blade server in response to the cryptographic affinity matching the previously generated value.
13. The memory device of claim 12 , wherein the operations further comprise denying access to the blade server based on the cryptographic affinity.
14. The memory device of claim 12 , wherein the operations further comprise denying a read operation from the blade server based on the cryptographic affinity.
15. The memory device of claim 12 , wherein the operations further comprise denying a write operation to the blade server based on the cryptographic affinity.
16. The memory device of claim 12 , wherein the operations further comprise deleting the electronic data stored to the blade server based on the cryptographic affinity.
17. The memory device of claim 15 , wherein the operations further comprise generating the cryptographic affinity in response to the hashing of the blade identifier with a group identifier associated with a group of chassis.