Secure remote online debugging of firmware on deployed hardware
In an aspect of the disclosure, a method, a computer-readable medium, and a device are provided. The device determines that a target event occurred at a first server in a group of servers that are jointly managed. The device obtains, for the first server, a public-private key pair including a first key and a second key. The device provides the first key to the first server such that the first server is accessible by authentication with the first key. The device provides the second key to a client device such that the first server is accessible by the client device by providing the second key to the server. Subsequently, the device revokes the first key from the first server.
1. A method of operating a computer system including a management device and a first server, comprising:
determining, at the management device, that a target event occurred at the first server in a group of servers that are jointly managed;
obtaining, at the management device and for the first server, a public-private key pair including a first key and a second key;
sending, from the management device to the first server, the first key such that the first server uses the first key to determine if a given key is the second key for authentication;
receiving, at the first server, the first key from the management device;
sending, from the management device to a client device, the second key such that the client device sends the second key to the first server for authentication;
receiving, at the first server, the second key from the client device in an authentication process;
sending, from the client device, an access request including a copy of the second key to the first server for authentication; and
in response to receiving the access request, matching the copy of the second key with the first key and verifying, at the first server and based on the first key, the copy of the second key included in the access request is from a same public-private key pair of the first key, and grants allowing, at the first server, the client device to access the first server when the copy of the second key is verified by using the first key and the copy of the second key matches the first key.
2. The method of claim 1 , wherein the target event is occurred at a component of the first server, wherein the first key is provided to firmware executed on the component.
3. The method of claim 1 , further comprising: generating the public-private key pair at the management device.
4. The method of claim 1 , wherein the first key is a public key of the public-private key pair.
5. The method of claim 1 , wherein the first key is a private key of the public-private key pair.
6. The method of claim 1 , wherein the providing the first key to the first server includes uploading the first key to the first server through an interface of the first server.
7. The method of claim 1 , further comprising: revoking the first key from the first server.
8. A computer system comprising:
a management device, the management device including:
a memory; and
at least one processor coupled to the memory and configured to:
determine, at the management device, that a target event occurred at a first server in a group of servers that are jointly managed;
obtain, at the management device and for the first server, a public-private key pair including a first key and a second key;
send, from the management device to the first server, the first key such that the first server uses the first key to determine if a given key is the second key for authentication;
send, from the management device to a client device, the second key such that the client device sends the second key to the first server for authentication; and
send, from the client device, an access request including a copy of the second key to the first server for authentication; and
the first server, including:
a server memory; and
at least one server processor coupled to the server memory and configured to:
receive, at the first server, the first key from the management device;
receive, at the first server, the second key from the client device in an authentication process; and
in response to receiving the access request, match the copy of the second key with the first key and verify, at the first server and based on the first key, the copy of the second key included in the access request is from a same public-private key pair of the first key and allow, at the first server, grants the client device to access the first server when the copy of the second key is verified by using the first key and the copy of the second key matches the first key.
9. The apparatus of claim 8 , wherein the target event is occurred at a component of the first server, wherein the first key is provided to firmware executed on the component.
10. The apparatus of claim 8 , wherein the at least one processor is further configured to: generate the public-private key pair at the management device.
11. The apparatus of claim 8 , wherein the first key is a public key of the public-private key pair.
12. The apparatus of claim 8 , wherein the first key is a private key of the public-private key pair.
13. The apparatus of claim 8 , wherein to provide the first key to the first server, the at least one processor is further configured to: upload the first key to the first server through an interface of the first server.
14. The apparatus of claim 8 , wherein the at least one processor is further configured to: revoke the first key from the first server.
15. A non-transitory computer-readable medium storing computer executable code for operating a management device o and a first server f a computer system, comprising code to:
determine, at the management device, that a target event occurred at the first server in a group of servers that are jointly managed;
obtain, at the management device and for the first server, a public-private key pair including a first key and a second key;
send, from the management device to the first server, the first key such that the first server uses the first key to determine if a given key is the second key for authentication;
receive, at the first server, the first key from the management device;
send, from the management device to a client device, the second key such that the client device sends the second key to the first server for authentication;
receive, at the first server, the second key from the client device in an authentication process;
send, from the client device, an access request including a copy of the second key to the first server for authentication; and
in response to receiving the access request, match the copy of the second key with the first key and verify, at the first server and based on the first key, the copy of the second key included in the access request is from a same public-private key pair of the first key and grants allow, at the first server, the client device to access the first server when the copy the second key is verified by using the first key and the copy of the second key matches the first key.
16. The non-transitory computer-readable medium of claim 15 , wherein the target event is occurred at a component of the first server, wherein the first key is provided to firmware executed on the component.
17. The non-transitory computer-readable medium of claim 15 , wherein the code is further configured to: generate the public-private key pair at the management device.
18. The non-transitory computer-readable medium of claim 15 , wherein the first key is a public key of the public-private key pair.