Maintaining dual-party authentication requirements for data retention compliance
Described is a system for maintaining dual-party authentication requirements for data retention compliance in systems with remote access components. When administering a data retention policy, an operating system component may require a dual-party authentication mechanism to prevent data deletion, while a different authentication mechanism may control access to the remote access controller. Access to the remote access controller by a single privileged user, however, may enable overriding or compromising the retention lock compliance implemented by the operating system. Accordingly, the system may tie the dual-party authentication requirement to the remote access controller authentication mechanism.
1. A system comprising:
one or more processors; and
a non-transitory computer readable medium storing a plurality of instructions, which when executed, cause the one or more processors to:
apply a retention lock to data stored by a storage system to ensure data retention compliance, the retention lock requiring a dual-party authentication to modify the data, the dual-party authentication requiring credentials from a first authorized user and a second authorized user, the storage system including a remote access controller allowing a third authorized user to modify a storage configuration associated with the storage system;
receive, from the first authorized user, a request to enable a retention lock compliance mode;
confirm credentials from the second authorized user, in response to the request to enable the retention lock compliance mode;
obtain configuration information for one or more user accounts for the remote access controller, the one or more user accounts including an administrative user account and a limited user account;
initiate disabling previous user accounts associated with the remote access controller, the previous user accounts including an account associated with the third authorized user;
initiate creating the administrative user account and the limited user account for the remote access controller, the administrative user account set to a disabled state and the limited user account set to an enabled state; and
activate the retention lock compliance mode for the storage system, the retention lock compliance mode requiring the dual-party authentication to access the remote access controller.
2. The system of claim 1 , wherein the limited user account restricts a user to operations associated with restarting or powering-on the storage system using the remote access controller.
3. The system of claim 1 , wherein initiating disabling previous user accounts associated with the remote access controller includes:
resetting a root user password for the remote access controller, and periodically resetting
the root user password after activating the compliance lock retention mode;
deleting the previous user accounts associated with the remote access controller; and
terminating any active user account sessions associated with the remote access controller.
4. The system of claim 1 , wherein the dual-party authentication mechanism for the retention lock is administered by a filesystem of the storage system, and an authentication mechanism for the remote access controller is administered by components of the remote access controller independent of the filesystem.
5. The system of claim 1 , wherein the plurality of instructions, when executed, further cause the one or more processors to:
receive, from the first authorized user, a request to access the remote access controller;
confirm credentials from the second authorized user, in response to the request to access the remote access controller and a determination the retention lock compliance mode is activated;
initiate enabling the administrative user account for a limited duration;
verify credentials for the administrative user account;
allow the administrative user account to perform one or more operations on the storage system using the remote access controller; and
initiate disabling the administrative user account after the limited duration.
6. The system of claim 1 , wherein the storage system includes a server managing a set of storage components that store the data, and the remote access controller includes physical components associated with the server.
7. The system of claim 6 , wherein the remote access controller executes on a separate processor than the processor executing an operating system of the storage system.
8. The system of claim 6 , wherein the remote access controller is part of a baseboard management controller (BMC) of the server.
9. A method comprising:
applying a retention lock to data stored by a storage system to ensure data retention compliance, the retention lock requiring a dual-party authentication to modify the data, the dual-party authentication requiring credentials from a first authorized user and a second authorized user, the storage system including a remote access controller allowing a third authorized user to modify a storage configuration associated with the storage system;
receiving, from the first authorized user, a request to enable a retention lock compliance mode;
confirming credentials from the second authorized user, in response to the request to enable the retention lock compliance mode;
obtaining configuration information for one or more user accounts for the remote access controller, the one or more user accounts including an administrative user account and a limited user account;
initiating disabling previous user accounts associated with the remote access controller, the previous user accounts including an account associated with the third authorized user;
initiating creating the administrative user account and the limited user account for the remote access controller, the administrative user account set to a disabled state and the limited user account set to an enabled state; and
activating the retention lock compliance mode for the storage system, the retention lock compliance mode requiring the dual-party authentication to access the remote access controller.
10. The method of claim 9 , wherein the limited user account restricts a user to operations associated with restarting or powering-on the storage system using the remote access controller.
11. The method of claim 9 , wherein initiating disabling previous user accounts associated with the remote access controller includes:
resetting a root user password for the remote access controller, and periodically resetting the root user password after activating the compliance lock retention mode;
deleting the previous user accounts associated with the remote access controller; and
terminating any active user account sessions associated with the remote access controller.
12. The method of claim 9 , wherein the dual-party authentication mechanism for the retention lock is administered by a filesystem of the storage system, and an authentication mechanism for the remote access controller is administered by components of the remote access controller independent of the filesystem.
13. The method of claim 9 , further comprising:
receiving, from the first authorized user, a request to access the remote access controller;
confirming credentials from the second authorized user, in response to the request to access the remote access controller and a determination the retention lock compliance mode is activated;
initiating enabling the administrative user account for a limited duration;
verifying credentials for the administrative user account;
allowing the administrative user account to perform one or more operations on the storage system using the remote access controller; and
initiating disabling the administrative user account after the limited duration.
14. The method of claim 9 , wherein the storage system includes a server managing a set of storage components that store the data, and the remote access controller includes physical components associated with the server.
15. A computer program product comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein to be executed by one or more processors, the program code including instructions to:
apply a retention lock to data stored by a storage system to ensure data retention compliance, the retention lock requiring a dual-party authentication to modify the data, the dual-party authentication requiring credentials from a first authorized user and a second authorized user, the storage system including a remote access controller allowing a third authorized user to modify a storage configuration associated with the storage system;
receive, from the first authorized user, a request to enable a retention lock compliance mode;
confirm credentials from the second authorized user, in response to the request to enable the retention lock compliance mode;
obtain configuration information for one or more user accounts for the remote access controller, the one or more user accounts including an administrative user account and a limited user account;
initiate disabling previous user accounts associated with the remote access controller, the previous user accounts including an account associated with the third authorized user;
initiate creating the administrative user account and the limited user account for the remote access controller, the administrative user account set to a disabled state and the limited user account set to an enabled state; and
activate the retention lock compliance mode for the storage system, the retention lock compliance mode requiring the dual-party authentication to access the remote access controller.
16. The computer program product of claim 15 , wherein the limited user account restricts a user to operations associated with restarting or powering-on the storage system using the remote access controller.
17. The computer program product of claim 15 , wherein initiating disabling previous user accounts associated with the remote access controller includes:
resetting a root user password for the remote access controller, and periodically resetting the root user password after activating the compliance lock retention mode;
deleting the previous user accounts associated with the remote access controller; and
terminating any active user account sessions associated with the remote access controller.
18. The computer program product of claim 15 , wherein the dual-party authentication mechanism for the retention lock is administered by a filesystem of the storage system, and an authentication mechanism for the remote access controller is administered by components of the remote access controller independent of the filesystem.
19. The computer program product of claim 15 , wherein the program code includes further instructions to:
receive, from the first authorized user, a request to access the remote access controller;
confirm credentials from the second authorized user, in response to the request to access the remote access controller and a determination the retention lock compliance mode is activated;
initiate enabling the administrative user account for a limited duration;
verify credentials for the administrative user account;
allow the administrative user account to perform one or more operations on the storage system using the remote access controller; and
initiate disabling the administrative user account after the limited duration.
20. The computer program product of claim 15 , wherein the storage system includes a server managing a set of storage components that store the data, and the remote access controller includes physical components associated with the server.