System and method to enable component inventory and compliance in the platform
A computing device includes user resources and a validation agent. The validation agent obtains a new configuration authentication request for the computing device. In response to obtaining the new configuration authentication request, the validation agent identifies the user resources of the computing device; matches an identifier of the computing device to a portion of validated configurations of multiple validated configurations; makes a determination that the identified user resources match at least one validated configuration of the portion of validated configurations of the multiple validated configurations; and authorizes a new configuration for the user resources in response to the determination.
1. A computing device in a distributed network, comprising:
resources of the computing device comprising hardware components and software components for controlling the hardware components; and
a validation agent programmed to:
obtain a new configuration authentication request for the computing device;
in response to obtaining the new configuration authentication request:
identify the resources of the computing device,
match an identifier of the computing device to a portion of validated configurations of a plurality of validated configurations associated with the distributed network stored in a persistent storage of the validation agent, wherein the validated configurations each specify a combination of the hardware components and the software components, the software components comprising firmware, firmware settings, and software drivers,
make a determination that the identified resources of the computing device match at least one validated configuration of the portion of validated configurations of the plurality of validated configurations associated with the distributed network; and
authorize a new configuration for the resources of the computing device in response to the determination.
2. The computing device of claim 1 , wherein the validation agent is further programmed to:
after a change to the resources of the computing device:
obtain a second new configuration authentication request for the computing device;
in response to obtaining the second new configuration authentication request:
identify the changed resources of the computing device,
make a second determination that the identified changed user resources does not match any validated configuration of the portion of the plurality of validated configurations associated with the distributed network; and
reject a second new configuration for the resources of the computing device in response to the second determination.
3. The computing device of claim 1 , wherein the resources of the computing device comprise:
a processor;
a memory;
a persistent storage; and
an interconnect that operably connects the processor, the memory, and the persistent storage.
4. The computing device of claim 3 , wherein the validation agent comprises:
a second processor;
a second memory; and
a second persistent storage,
wherein the validation agent is operably connected to the interconnect.
5. The computing device of claim 4 , wherein the resources of the computing device are unable to interact with the validation agent via the interconnect.
6. The computing device of claim 1 , wherein identifying the resources of the computing device comprises:
accessing an interconnect of the resources of the computing device while the resources perform functions for a user; and
obtaining, via the accessing, identifiers of a plurality of resources of the resources of the computing device.
7. The computing device of claim 6 , wherein the identifiers comprises:
a processor identifier;
a persistent storage identifier;
an interconnect identifier; and
a memory identifier.
8. The computing device of claim 6 , wherein identifying the resources of the computing device further comprises:
obtaining, via the accessing, a version identifier for a resource of the plurality of resources of the resources of the computing device.
9. The computing device of claim 8 , wherein persistent storage identifier comprises:
a solid state drive identifier; and
a hard disk drive identifier.
10. The computing device of claim 1 , wherein the resources of the computing device are identified without interrupting user functions of the resources of the computing device.
11. The computing device of claim 1 , wherein the computing device advertises:
an internet protocol address associated with the computing device; and
a second internet protocol address associated with the validation agent.
12. The computing device of claim 11 , wherein the validation agent comprises:
a network adapter separates from a second network adapter of the resources of the computing device,
wherein the validation agent obtains the new configuration authentication request via the network adapter.
13. The computing device of claim 11 , wherein the resources of the computing device comprise:
a network adapter,
wherein the validation agent obtains the new configuration authentication request via the network adapter.
14. The computing device of claim 1 , each validated configuration of the plurality of validated configurations associated with the distributed network specifies:
a plurality of hardware components, and
a range of version numbers for each hardware component of the plurality of hardware components.
15. A method for authorizing a new configuration of resources of a computing device in a distributed network, comprising:
obtaining, by a validation agent hosted by the computing device, a new configuration authentication request for the computing device;
in response to the obtained new configuration authentication request:
identifying, by the validation agent, the resources of the computing device comprising hardware components and software for controlling hardware components,
matching, by the validation agent, an identifier of the computing device to a portion of validated configurations of a plurality of validated configurations associated with the distributed network stored in a persistent storage of the validation agent, wherein the validated configurations each comprise a combination of hardware components and software components, the software components comprising firmware, firmware settings, and software drivers,
making a determination, by the validation agent, that the identified resources of the computing device match at least one validated configuration of the portion of validated configurations of the plurality of validated configurations associated with the distributed network based on the matching; and
authorizing, by the validation agent, the new configuration for the resources of the computing device in response to the determination.
16. The method of claim 15 , further comprising:
after a change to the resources of the computing device:
obtaining, by the validation agent, a second new configuration authentication request for the computing device;
in response to the obtained second new configuration authentication request:
identifying, by the validation agent, the changed resources of the computing device,
making a second determination, by the validation agent, that the identified changed resources of the computing device does not match any validated configuration of the portion of validated configurations of the plurality of validated configurations associated with the distributed network based on the matching; and
rejecting, by the validation agent, a second new configuration for the resources of the computing device in response to the second determination.
17. The method of claim 15 , wherein the resources of the computing device are identified without interrupting user functions of the resources of the computing device.
18. A non-transitory computer readable medium comprising computer readable program code, which when executed by a computer processor enables the computer processor to perform a method for authorizing a new configuration of resources of a computing device in a distributed network, the method comprising:
obtaining, by a validation agent hosted by the computing device, a new configuration authentication request for the computing device;
in response to the obtained new configuration authentication request:
identifying, by the validation agent, the resources of the computing device comprising hardware components and software for controlling hardware components,
matching, by the validation agent, an identifier of the computing device to a portion of validated configurations of a plurality of validated configurations associated with the distributed network stored in a persistent storage of the validation agent, wherein the validated configurations each comprise a combination of hardware components and software components, the software components comprising firmware, firmware settings, and software drivers,
making a determination, by the validation agent, that the identified resources of the computing device match at least one validated configuration of the portion of validated configurations of the plurality of validated configurations associated with the distributed network based on the matching; and
authorizing, by the validation agent, the new configuration for the resources of the computing device in response to the determination.
19. The non-transitory computer readable medium of claim 18 , wherein the method further comprising:
after a change to the resources of the computing device:
obtaining, by the validation agent, a second new configuration authentication request for the computing device;
in response to obtaining the second new configuration authentication request:
identifying, by the validation agent, the changed resources of the computing device,
making, by the validation agent, a second determination that the identified changed resources of the computing device does not match any validated configuration of the portion of the plurality of validated configurations associated with the distributed network; and
rejecting, by the validation agent, a second new configuration for the resources of the computing device in response to the second determination.
20. The non-transitory computer readable medium of claim 18 , wherein the resources of the computing device are identified without interrupting user functions of the resources of the computing device.