Locking key secondary access system
A locking key secondary access system includes a key management system coupled to a secondary locking key access device and a server device via a network. The server device includes a managed device. The server device receives a request to unlock the managed device, and determines that a first access path via a first communication subsystem and through the network to the key management system is unavailable. In response, the server device provides locking key request information via a second communication subsystem to the secondary locking key access device. The secondary locking key access device may use the locking key information to retrieve a locking key for the managed device from the key management system. The secondary locking key access device sends the locking key to the server device via the second communication subsystem, and the server device uses the locking key to unlock the managed device.
1. A locking key secondary access system, comprising:
a key management system;
a secondary locking key access device that is coupled to the key management system via a network;
a tertiary locking key access device that is coupled to the key management system via a network; and
a first server device that is coupled to the key management system via the network, wherein the first server device includes:
a managed device; and
a first remote access controller device that is coupled to the managed device and that is configured to:
receive a request to unlock the managed device;
determine that a first access path that is provided via a first communication subsystem and through the network to the key management system is unavailable;
provide, in response to determining that the first access path is unavailable, locking key request information via a second communication subsystem to the secondary locking key access device, wherein the locking key request information is configured to provide for retrieval of a locking key for the managed device from the key management system;
receive, from the secondary locking key access device via the second communication subsystem, the locking key; and
unlock the managed device using the locking key,
wherein the secondary locking key access device is configured to:
receive, from the first remote access controller device, the locking key request information;
determine that a second access path through the network to the key management system is unavailable;
provide, in response to determining that the second access path is unavailable, the locking key request information to the tertiary locking key access device;
receive, from the tertiary locking key access device, the locking key; and
provide the locking key to the first remote access controller device.
2. The system of claim 1 , wherein the secondary locking key access device is configured to:
receive the locking key request information;
retrieve, using the locking key request information and via a second access path through the network to the key management system, the locking key; and
provide the locking key to the first remote access controller device.
3. The system of claim 1 , wherein the secondary locking key access device is provided by a second server device, and wherein the second server device includes a second remote access controller device that is configured to receive the locking key request information, retrieve the locking key, and provide the locking key to the first remote access controller device.
4. The system of claim 1 , wherein the first communication subsystem is a wired communication subsystem, and wherein the second communication subsystem is a wireless communication subsystem.
5. The system of claim 1 , wherein the first remote access controller device is configured to:
identify, prior to receiving the request to unlock the managed device, the secondary locking key access device as providing a second access path to the key management system;
store, in response to identifying the secondary locking key access device as providing the second access path, a secondary locking key access device identifier in a key management database; and
select, via the secondary locking key access device identifier in the key management database in response to determining that the first access path is unavailable, the secondary locking key access device for providing the second access path to the key management system.
6. The system of claim 1 , wherein the first remote access controller device is configured to:
authenticate the locking key received from the secondary locking key access device; and
unlock, in response to authenticating the locking key, the managed device using the locking key.
7. An Information Handling System (IHS), comprising:
a processing system; and
a memory system that is coupled to the processing system and that includes instructions that, when executed by the processing system, cause the processing system to provide a remote access controller engine that is configured to:
identify a secondary locking key access device as providing a second access path to a key management system;
store, in response to identifying the secondary locking key access device as providing the second access path, a secondary locking key access device identifier in a key management database;
receive a request to unlock a managed device;
determine that a first access path through a network to the key management system, which is available via a first communication subsystem that is coupled to the processing system, is unavailable;
select, via the secondary locking key access device identifier in the key management database in response to determining that the first access path is unavailable, the secondary locking key access device for providing the second access path to the key management system;
provide, in response to determining that the first access path is unavailable, first locking key request information to the secondary locking key access device via a second communication subsystem that is coupled to the processing system, wherein the first locking key information is configured to provide for retrieval of a locking key for the managed device from the key management system;
receive, from the secondary locking key access device via the second communication subsystem, the locking key; and
unlock the managed device using the locking key.
8. The IHS of claim 7 , wherein the secondary locking key access device is provided by a wireless networking device.
9. The IHS of claim 7 , wherein the secondary locking key access device is provided by a server device.
10. The IHS of claim 7 , wherein the first communication subsystem is a wired communication subsystem, and wherein the second communication subsystem is a wireless communication subsystem.
11. The IHS of claim 7 , wherein the remote access controller engine is configured to:
authenticate the locking key received from the secondary locking key access device; and
unlock, in response to authenticating the locking key, the managed device using the locking key.
12. A method for providing secondary access to a locking key, comprising:
receiving, by a first server device, a request to unlock a managed device included in the first server device;
determining, by the first server device, that a first access path that is provided via a first communication subsystem in the first server device and through a network to a key management system is unavailable;
providing, by the first server device in response to determining that the first access path is unavailable, locking key request information to a secondary locking key access device via a second communication subsystem in the first server device, wherein the locking key request information is configured to provide for retrieval of a locking key for the managed device from the key management system;
receiving, by the first server device from the secondary locking key access device via the second communication subsystem, the locking key;
authenticating, by the first server device, the locking key received from the secondary locking key access device; and
unlocking, by the first server device in response to authenticating the locking key, the managed device using the locking key.
13. The method of claim 12 , wherein the secondary locking key access device is provided by a wireless networking device.
14. The method of claim 12 , wherein the secondary locking key access device is provided by a server device.
15. The method of claim 12 , wherein the first communication subsystem is a wired communication subsystem, and wherein the second communication subsystem is a wireless communication subsystem.
16. The method of claim 12 , further comprising:
identifying, by the first server device prior to receiving the request to unlock the managed device, the secondary locking key access device as providing a second access path to the key management system;
storing, by the first server device in response to identifying the secondary locking key access device as providing the second access path, a secondary locking key access device identifier in a key management database; and
selecting, by the first server device via the secondary locking key access device identifier in the key management database in response to determining that the first access path is unavailable, the secondary locking key access device for providing the second access path to the key management system.
17. The method of claim 12 , further comprising:
receiving, by the secondary locking key access device from the first server device, the locking key request information;
determining, by the secondary locking key access device, that a second access path through the network to the key management system is unavailable;
providing, by the secondary locking key access device in response to determining that the second access path is unavailable, the locking key request information to a tertiary locking key access device;
receiving, by the secondary locking key access device from the tertiary locking key access device, the locking key; and
providing, by the secondary locking key access device, the locking key to the first server device.