System and method for secure access to a distributed virtual firmware network drive
An information handling system includes a virtual network access module configured to access a virtual network drive that has a first partition in a local storage resource and a second partition in a remote storage resource. In response to detection of an exception, a processor may trigger an exception handler that directs a service processor to initialize a network stack. The processor initializes a mailbox to transmit a mailbox request to retrieve network configuration settings to be used in the initialization of the network stack. The service processor transmits a request to the processor to initialize the mailbox, and initializes the network stack based on the network configuration settings. Subsequent to the initialization of the network stack, a universal network device interface request may be sent to mount and secure communication with the virtual network drive.
1. A method comprising:
receiving, by a processor of an information handling system, an input/output request from an operating system to access recovery data stored in a partition in a remote storage device, wherein the partition is included in a virtual drive mapped to the information handling system, and wherein the operating system does not have access rights to the virtual drive, wherein the recovery data in the partition of the remote storage device is synchronized with local storage of the virtual drive;
retrieving authentication information from a key store that keeps authentication information associated with the processor, wherein the authentication information includes a platform key that is used to generate a digital signature;
providing the authentication information with the digital signature to the virtual drive that includes information associated with the input/output request and the processor;
responsive to receiving a successful authentication response from the virtual drive, unlocking and mounting the virtual drive allowing access to the recovery data; and
executing the input/output request at the partition of the virtual drive.
2. The method of claim 1 , wherein the virtual drive includes a local partition in a local storage device.
3. The method of claim 1 , wherein the authentication information is associated with the input/output request.
4. The method of claim 1 , wherein the input/output request is an advanced configuration and power interface request.
5. The method of claim 1 , wherein the virtual drive is hidden from the operating system.
6. The method of claim 1 , further comprising locking the partition of the remote storage device subsequent to the executing of the input/output request.
7. The method of claim 1 , further comprising using a universal network driver interface to update the authentication information.
8. The method of claim 1 , further comprising performing a key exchange between the information handling system and the virtual drive.
9. An information handling system, comprising:
a processor; and
a memory coupled to hardware processor, the memory storing instructions that when executed cause the processor to perform operations including:
receiving an input/output request from an operating system to access recovery data stored in a partition in a remote storage device, wherein the partition is included in a virtual drive mapped to the information handling system, and wherein the operating system does not have access rights to the virtual drive, wherein the recovery data in the partition of the remote storage device is synchronized with local storage of the virtual drive;
retrieving authentication information from a key store that keeps authentication information associated with the processor, wherein the authentication information includes a platform key that is used to generate a digital signature;
providing the authentication information with the digital signature to the virtual drive that includes information associated with the input/output request and the processor;
responsive to receiving a successful authentication response from the virtual drive, unlocking and mounting the virtual drive allowing access to the recovery data; and
executing the input/output request at the partition of the virtual drive.
10. The information handling system of claim 9 , wherein the virtual drive includes a local partition in a local storage device.
11. The information handling system of claim 9 , wherein the authentication information is associated with the input/output request.
12. The information handling system of claim 9 , wherein the input/output request is an advanced configuration and power interface request.
13. The information handling system of claim 9 , wherein the authentication information includes a platform key associated with the processor.
14. A non-transitory computer-readable medium to store instructions that are executable to perform operations comprising:
receiving an input/output request from an operating system to access recovery data stored in a partition in a remote storage device, wherein the partition is included in a virtual drive mapped to an information handling system, and wherein the operating system does not have access rights to the virtual drive, wherein the recovery data in the partition of the remote storage device is synchronized with local storage of the virtual drive;
retrieving authentication information from a key store that keeps authentication information associated with a processor, wherein the authentication information includes a platform key that is used to generate a digital signature;
providing the authentication information with the digital signature to the virtual drive that includes information associated with the input/output request and the processor;
responsive to receiving a successful authentication response from the virtual drive, unlocking and mounting the virtual drive allowing access to the recovery data; and
executing the input/output request at the partition of the virtual drive.
15. The non-transitory computer-readable medium of claim 14 , wherein the virtual drive is hidden from the operating system.
16. The non-transitory computer-readable medium of claim 14 , the operations further comprising locking the partition of the remote storage device subsequent to the executing of the input/output request.
17. The non-transitory computer-readable medium of claim 14 , the operations further comprising performing a key exchange between the information handling system and the virtual drive.