Systems and methods for smart network interface card-initiated server management
An information handling system may include a processor, a management controller communicatively coupled to the processor and configured for out-of-band management of the information handling system, and a smart network interface card communicatively coupled to the processor and the management controller, and configured to obtain a secret for authenticating the smart network interface card to the management controller, request an access token reference from the management controller, the request including the secret and an identifier of the smart network interface card in order to authenticate the smart network interface card to the management controller, in response to the request for the access token reference, receive the access token reference, and communicate a management task request to the management controller using the access token reference.
1. An information handling system comprising:
a host processor;
a baseboard management controller communicatively coupled to the host processor and configured for out-of-band management of the information handling system; and
a smart network interface card communicatively coupled to the host processor and the baseboard management controller, and configured to:
obtain a secret, randomly generated by the baseboard management controller, for authenticating the smart network interface card to the baseboard management controller;
request an access token reference from the baseboard management controller, the request including the secret and an identifier of the smart network interface card in order to authenticate the smart network interface card to the baseboard management controller;
in response to the request for the access token reference, receive the access token reference; and
communicate a management task request to the baseboard management controller using the access token reference;
wherein the secret is invalidated in response to removal of the smart network interface card.
2. The information handling system of claim 1 , wherein the smart network interface card is configured to obtain the secret from the baseboard management controller via a secured communication channel.
3. The information handling system of claim 2 , wherein the baseboard management controller is configured to:
obtain an inventory of the information handling system; and
generate the secret in response to a determination from the inventory that the smart network interface card is located in a privileged slot of the information handling system.
4. The information handling system of claim 3 , wherein the baseboard management controller is configured to:
generate the secret in response to a determination that the hardware and software of the smart network interface card are authenticated.
5. A method comprising, in an information handling system comprising a host processor, a baseboard management controller communicatively coupled to the host processor and configured for out-of-band management of the information handling system, and a smart network interface card communicatively coupled to the host processor and the baseboard management controller:
obtaining, by the smart network interface card, a secret, randomly generated by the baseboard management controller, for authenticating the smart network interface card to the baseboard management controller;
requesting, by the smart network interface card, an access token reference from the baseboard management controller, the request including the secret and an identifier of the smart network interface card in order to authenticate the smart network interface card to the baseboard management controller;
in response to the request for the access token reference, receiving, by the smart network interface card, the access token reference; and
communicating, by the smart network interface card, a management task request to the baseboard management controller using the access token reference;
wherein the secret is invalidated in response to removal of the smart network interface card.
6. The method of claim 5 , wherein method further comprises obtaining, by the smart network interface card, the secret from the baseboard management controller via a secured communication channel.
7. The method of claim 6 , further comprising:
obtaining, by the baseboard management controller, an inventory of the information handling system; and
generating, by the baseboard management controller, the secret in response to a determination from the inventory that the smart network interface card is located in a privileged slot of the information handling system.
8. The method of claim 7 , further comprising:
generating, by the baseboard management controller, the secret in response to a determination that the hardware and software of the smart network interface card are authenticated.
9. An article of manufacture comprising:
a non-transitory computer-readable medium; and
computer-executable instructions carried on the computer-readable medium, the instructions readable by a processor of a smart network interface card of an information handling system comprising a host processor communicatively coupled to the smart network interface card and a baseboard management controller communicatively coupled to the host processor and the smart network interface card and configured for out-of-band management of the information handling system, the instructions, when read and executed, for causing the processor to:
obtain a secret, randomly generated by the baseboard management controller, for authenticating the smart network interface card to the baseboard management controller;
request an access token reference from the baseboard management controller, the request including the secret and an identifier of the smart network interface card in order to authenticate the smart network interface card to the baseboard management controller;
in response to the request for the access token reference, receive the access token reference; and
communicate a management task request to the baseboard management controller using the access token reference;
wherein the secret is invalidated in response to removal of the smart network interface card.
10. The article of claim 9 , wherein the instructions are for further causing the processor to obtain the secret from the baseboard management controller via a secured communication channel.
11. The article of claim 10 , wherein the baseboard management controller is configured to:
obtain an inventory of the information handling system; and
generate the secret in response to a determination from the inventory that the smart network interface card is located in a privileged slot of the information handling system.
12. The article of claim 11 , wherein the baseboard management controller is configured to:
generate the secret in response to a determination that the hardware and software of the smart network interface card are authenticated.