System and method for detecting rogue devices on a device management bus
Embodiments provide methods and systems for detecting rogue endpoints on a device management bus. A communications controller configured as a bus owner initiates discovery of managed devices coupled to the bus and generate a unique identifier for each managed device. The communications controller transmits a bus configuration message to the managed devices, including the respective unique identifiers. The managed devices are configured as bus endpoints based on the bus configuration message. The managed devices also capture the bus address of the communications controller from the received bus configuration message. Messages received by a managed device are authenticated as originating from the communications controller if the messages include the unique identifier provided to that managed device. The messages may be further authenticated by comparing the bus address of the message sender against the captured bus address of the communications controller.
1. A system for detecting rogue devices on a device management bus, the system comprising:
a communications controller configured as a bus owner of the device management bus and further configured to:
initiate discovery of a plurality of managed devices coupled to the device management bus;
generate a unique identifier for each of the managed devices;
generate a bus configuration message including the respective unique identifier generated for each managed device; and
transmit the bus configuration messages to the respective managed devices; and
the plurality of managed devices, each configured as an endpoint of the device management bus based on a received bus configuration message, and each further configured to;
capture a bus address of the communications controller from the received bus configuration message;
receive, on the device management bus, a first message from a sender at a first bus address, the message including a sender identifier; and
authenticate the sender based on evaluation of the first bus address against the captured bus address, and further based on evaluation of the sender identifier against the unique identifier provided to the respective managed device; and
a remote access controller configured to query a plurality of configuration registers of the communications controller upon every file operation conducted by the remote access controller.
2. The system of claim 1 , wherein each of the plurality of managed devices is further configured to store the first bus address if the sender is not authenticated.
3. The system of claim 2 , wherein each of the plurality of managed devices is further configured to discard the first message if the sender is not authenticated.
4. The system of claim 3 , wherein the communications controller is further configured to query the plurality of managed devices for rogue endpoints.
5. The system of claim 4 , wherein the communications controller is further configured to disable the rogue endpoints on the device management bus.
6. The system of claim 1 , wherein the device management bus is a PCIe (Peripheral Component Interconnect express) VDM (Vendor Defined Message) bus for communicating MCTP (Management Component Transport Protocol) messages.
7. The system of claim 1 , wherein the communications controller comprises a VDM (Vender Defined Message) controller.
8. The system of claim 1 , wherein the remote access controller is further configured to re-initialize the communications controller upon determining the plurality of configuration registers have been cleared.
9. A method for detecting rogue devices on a device management bus by a communications controller configured as a bus owner, the method comprising:
initiating discovery of a plurality of managed devices coupled to the device management bus;
generating a unique identifier for each of the managed devices;
generating a bus configuration message including the respective unique identifier generated for each managed device;
transmitting the bus configuration messages to the respective managed devices, wherein each of the managed devices is configured to: capture a bus address of the communications controller from the received bus configuration message; receive, on the device management bus, a first message from a sender at a first bus address, the message including a sender identifier; and
authenticate the sender based on evaluation of the first bus address against the captured bus address, and of the sender identifier against the unique identifier provided to the respective managed device; and
querying, by a remote access controller, a plurality of configuration registers of the communications controller upon every file operation conducted by the remote access controller.
10. The method of claim 9 , wherein each of the plurality of managed devices is further configured to store the first bus address if the sender is not authenticated.
11. The method of claim 10 , wherein each of the plurality of managed devices is further configured to discard the first message if the sender is not authenticated.
12. The method of claim 11 , further comprising: querying, by the communications controller, the plurality of managed devices for rogue endpoints.
13. The method of claim 12 , further comprising: disabling the rogue endpoints on the device management bus.
14. The method of claim 9 , wherein the device management bus is a PCIe (Peripheral Component Interconnect express) VDM (Vendor Defined Message) bus for communicating MCTP (Management Component Transport Protocol) messages.
15. The method of claim 9 , wherein the communications controller comprises a VDM (Vender Defined Message) controller.
16. The method of claim 9 , further comprising:
reinitializing, by the remote access controller, the communications controller upon determining the plurality of configuration registers have been cleared.
17. A computer-readable storage device configured for detecting rogue devices on a device management bus by a communications controller configured as a bus owner of the device management bus and having program instructions stored thereon that, upon execution by one or more processors, cause the one or more processors to:
initiate discovery of a plurality of managed devices coupled to the device management bus;
generate a unique identifier for each of the managed devices;
generate a bus configuration message including the respective unique identifier generated for each managed device;
transmit the bus configuration messages to the respective managed devices, wherein each of the managed devices is configured to: capture a bus address of the communications controller from the received bus configuration message; receive, on the device management bus, a first message from a sender at a first bus address, the message including a sender identifier; and
authenticate the sender based on evaluation of the first bus address against the captured bus address, and of the sender identifier against the unique identifier provided to the respective managed device; and
querying, by a remote access controller, a plurality of configuration registers of the communications controller upon every file operation conducted by the remote access controller.
18. The computer-readable storage device configured of claim 17 , the program instructions further causing the one or more processors to query the plurality of managed devices for rogue endpoints identified by the managed devices as unauthenticated message senders.
19. The computer-readable storage device configured of claim 18 , the program instructions further causing the one or more processors to disable the rogue endpoints on the device management bus.
20. The computer-readable storage device configured of claim 17 , wherein the device management bus is a PCIe (Peripheral Component Interconnect express) VDM (Vendor Defined Message) bus for communicating MCTP (Management Component Transport Protocol) messages.