System and method for providing quality of service during transport key rotation at a distributed management controller group
Methods and systems for providing quality of service to an information handling system may involve generating a new transport encryption key for a management controller group, notifying nodes in the management controller group to negotiate for the new transport encryption key, and encrypting a first message to be sent to a first node in the management controller group using a current transport encryption key. The new transport encryption key for encrypted communications in the management controller group and to replace a current transport encryption key. The first message encrypted after notifying the nodes in the management controller group to negotiate for the new transport encryption key. The nodes of the management controller group including the first node.
1. A method for providing quality of service of an information handling system, comprising:
generating a new transport encryption key for a management controller group, the new transport encryption key for encrypted communications in the management controller group;
notifying, by a master of the management controller group, nodes in the management controller group to negotiate for the new transport encryption key, the new transport encryption key to replace a current transport encryption key;
encrypting, by the master of the management controller group, a first message to be sent to a first node in the management controller group using the current transport encryption key, the first message encrypted after notifying the nodes in the management controller group to negotiate for the new transport encryption key, the nodes of the management controller group including the first node;
receiving a second message at the master of the management controller group, the second message received from the first node after notifying the nodes in the management controller group to negotiate for the new transport encryption key and before the first message is encrypted by the master;
decrypting the second message using the current transport encryption key;
determining whether the decryption using the current transport encryption key was successful; and
decrypting the second message using the new transport encryption key based on a determination that the decryption using the current transport encryption key was not successful.
2. The method of claim 1 , further comprising:
determining whether a grace period has expired based on an evaluation of an amount of time passed, the amount of time passed associated with the notification of the nodes to negotiate for the new transport encryption key; and
replacing the current transport encryption key with the new transport encryption key based on a determination that the grace period has expired.
3. The method of claim 1 , further comprising:
determining whether all online nodes in the management controller group have used the new transport encryption key; and
replacing the current transport encryption key with the new transport encryption key based on a determination that all nodes in the management controller group have used the new transport encryption key.
4. The method of claim 1 , further comprising:
receiving a third message from a second node to rejoin the management controller group, the second node offline when notifying the nodes in the management controller group to negotiate for the new transport encryption key; and
sending a fourth message to the second node in response to receiving the second message to rejoin the management controller group, the fourth message including the current transport encryption key and the new transport encryption key.
5. The method in claim 1 , wherein the decryption of the second message using the new transport encryption key further uses a message encryption key, the message encryption key specific to the second message and derived from at least the new transport encryption key.
6. An information handling system, comprising:
a processor subsystem having access to a first memory;
a management controller comprising a secondary processor having access to a second memory, the second memory including an embedded storage partition and the second memory storing instructions executable by the secondary processor to:
generate a new transport encryption key for a management controller group, the new transport encryption key for encrypted communications in the management controller group;
notify, by a master of the management controller group, nodes in the management controller group to negotiate for the new transport encryption key, the new transport encryption key to replace a current transport encryption key;
encrypt, by the master of the management controller group, a first message to be sent to a first node in the management controller group using the current transport encryption key, the first message encrypted after the nodes in the management controller group are notified to negotiate for the new transport encryption key, the nodes of the management controller group including the first node;
receive a second message at the master of the management controller group, the second message received from the first node after the nodes in the management controller group are notified to negotiate for the new transport encryption key and before the first message is encrypted by the master;
decrypt the second message using the current transport encryption key;
determine whether the decryption using the current transport encryption key was successful; and
decrypt the second message using the new transport encryption key based on a determination that the decryption using the current transport encryption key was not successful.
7. The information handling system of claim 6 , further comprising instructions executable by the secondary processor to:
determine whether a grace period has expired based on an evaluation of an amount of time passed, the amount of time passed associated with the notification of the nodes to negotiate for the new transport encryption key; and
replace the current transport encryption key with the new transport encryption key based on a determination that the grace period has expired.
8. The information handling system of claim 6 , further comprising instructions executable by the secondary processor to:
determine whether all online nodes in the management controller group have used the new transport encryption key; and
replace the current transport encryption key with the new transport encryption key based on a determination that all nodes in the management controller group have used the new transport encryption key.
9. The information handling system of claim 6 , further comprising instructions executable by the secondary processor to:
receive a third message from a second node to rejoin the management controller group, the second node offline when the nodes in the management controller group are notified to negotiate for the new transport encryption key; and
send a fourth message to the second node, the fourth message including the current transport encryption key and the new transport encryption key.
10. The information handling system of claim 6 , wherein the first message includes an outgoing whisper counter corresponding to the first node, the outgoing whisper counter incremented before the first message is encrypted.
11. The information handling system of claim 6 , wherein the decryption of the second message using the new transport encryption key further uses a message encryption key, the message encryption key specific to the second message and derived from at least the new transport encryption key.
12. A management controller for an information handling system having a primary processor and a primary memory, the management controller comprising a secondary processor having access to a secondary memory, the secondary memory including an embedded storage partition and the secondary memory storing instructions executable by the secondary processor to:
generate a new transport encryption key for a management controller group, the new transport encryption key for encrypted communications in the management controller group;
notify, by a master of the management controller group, nodes in the management controller group to negotiate for the new transport encryption key, the new transport encryption key to replace a current transport encryption key;
encrypt, by the master of the management controller group, a first message to be sent to a first node in the management controller group using the current transport encryption key, the first message encrypted after the nodes in the management controller group are notified to negotiate for the new transport encryption key, the nodes of the management controller group including the first node;
receive a second message at the master of the management controller group, the second message received from the first node after the nodes in the management controller group are notified to negotiate for the new transport encryption key and before the first message is encrypted by the master;
decrypt the second message using the current transport encryption key;
determine whether the decryption using the current transport encryption key was successful; and
decrypt the second message using the new transport encryption key based on a determination that the decryption using the current transport encryption key was not successful.
13. The management controller of claim 12 , further comprising instructions executable by the secondary processor to:
determine whether a grace period has expired based on an evaluation of an amount of time passed, the amount of time passed associated with the notification of the nodes to negotiate for the new transport encryption key; and
replace the current transport encryption key with the new transport encryption key based on a determination that the grace period has expired.
14. The management controller of claim 12 , further comprising instructions executable by the secondary processor to:
determine whether all online nodes in the management controller group have used the new transport encryption key; and
replace the current transport encryption key with the new transport encryption key based on a determination that all nodes in the management controller group have used the new transport encryption key.
15. The management controller of claim 12 , further comprising instructions executable by the secondary processor to:
receive a third message from a second node to rejoin the management controller group, the second node offline when the nodes in the management controller group are notified to negotiate for the new transport encryption key; and
send a fourth message to the second node, the fourth message including the current transport encryption key and the new transport encryption key.
16. The management controller of claim 12 , wherein the first message includes an outgoing whisper counter corresponding to the first node, the outgoing whisper counter incremented before the first message is encrypted.
17. The management controller of claim 12 , wherein the decryption of the second message using the new transport encryption key further uses a message encryption key, the message encryption key specific to the second message and derived from at least the new transport encryption key.