Firmware attestation on system reset
Technologies are described for performing firmware attestation on system reset. When a managed computing system is reset, a baseboard management controller (“BMC”) generates a notification that the managed computing system has been reset and transmits the notification to an event listener executing in a management system by way of an out-of-band (“OOB”) network. The event listener receives the notification that the managed computing system has been reset and, in turn, causes a security manager executing in the management system to transmit a request for firmware attestation data to a platform security agent executing on the managed computing system. The security manager receives the firmware attestation data from the platform security agent by way of an in-band network and stores the firmware attestation data in a database for exposure to other program components for use in evaluating the trustworthiness of the firmware executing on the managed computing system.
1. A computer-implemented method for a management system to monitor operations of a managed computing system, comprising:
subscribing, by way of the management system, for notifications that the managed computing system has been reset, wherein:
the notifications are generated by a baseboard management controller of the managed computing system; and
the notifications are transmitted by the baseboard management controller to the management system by way of a first network that is utilized for control of the managed computing system, wherein the first network is an out-of-band network that enables the management system to control the managed computing system when the managed computing system is at least one of not reachable via the second network or powered off;
receiving a notification that the managed computing system has been reset from the baseboard management controller at the management system and by way of the first network;
responsive to receiving the notification that the managed computing system has been reset from the baseboard management controller, transmitting a request for firmware attestation data by way of a second network to a platform security agent executing on the managed computing system wherein the second network is utilized for production network traffic;
receiving the firmware attestation data from the platform security agent by way of the second network; and
exposing the firmware attestation data to one or more program components for use in evaluating a trustworthiness of a firmware executing on the managed computing system.
2. The computer-implemented method of claim 1 , wherein a REDFISH-compatible event listener executing in the management system subscribes for the notifications that the managed computing system has been reset.
3. The computer-implemented method of claim 2 , wherein the REDFISH-compatible event listener receives the notification that the managed computing system has been reset.
4. The computer-implemented method of claim 3 , wherein the REDFISH-compatible event listener provides the notification that the managed computing system has been reset to a security manager executing in the management system.
5. The computer-implemented method of claim 4 , wherein the security manager transmits the request for the firmware attestation data to a platform security agent executing on the managed computing system and receives the firmware attestation data from the platform security agent by way of the second network.
6. The computer-implemented method of claim 1 , wherein an application programming interface server executes in the management system is configured to expose the firmware attestation data stored in a database to the one or more program components.
7. The computer-implemented method of claim 6 , wherein the one or more program components comprise a management console and one or more orchestration systems.
8. At least one non-transitory computer-readable storage medium for a management system to monitor operations of a managed computing system, the least one non-transitory computer-readable storage medium having computer-executable instructions stored thereupon which, when executed by a computing system, cause the computing system to:
subscribe, by way of the management system, for notifications that the managed computing system has been reset, wherein:
the notifications are generated by a baseboard management controller of the managed computing system; and
the notifications are transmitted by the baseboard management controller to the management system by way of a first network that is utilized for controlling the managed computing system, wherein the first network is an out-of-band network that enables the management system to control the managed computing system when the managed computing system is at least one of not reachable via the second network or powered off;
receive a notification that the managed computing system has been reset from the baseboard management controller at the management system and by way of the first network;
responsive to receiving the notification that the managed computing system has been reset from the baseboard management controller, transmit a request for firmware attestation data on a second network to a platform security agent executing on the managed computing system wherein the second network is utilized for production network traffic;
receive the firmware attestation data from the platform security agent by way of the second network; and
expose the firmware attestation data to one or more program components for use in evaluating a trustworthiness of a firmware executing on the managed computing system.
9. The non-transitory computer-readable storage medium of claim 8 , wherein a REDFISH-compatible event listener executing in the management system subscribes for the notifications that the managed computing system has been reset.
10. The non-transitory computer-readable storage medium of claim 9 , wherein the REDFISH-compatible event listener receives the notification that the managed computing system has been reset.
11. The non-transitory computer-readable storage medium of claim 10 , wherein the REDFISH-compatible event listener provides the notification that the managed computing system has been reset to a security manager executing in the management system.
12. The non-transitory computer-readable storage medium of claim 11 , wherein the security manager transmits the request for the firmware attestation data to a platform security agent executing on the managed computing system and receives the firmware attestation data from the platform security agent by way of the second network.
13. The non-transitory computer-readable storage medium of claim 12 , wherein the security manager is further configured to store the firmware attestation data in a database.
14. The non-transitory computer-readable storage medium of claim 13 , an application programming interface server executes in the management system is configured to expose the firmware attestation data stored in the database to the one or more program components.
15. The non-transitory computer-readable storage medium of claim 14 , wherein the one or more program components comprise one or more of a management console or one or more orchestration systems.
16. A managed system for monitoring operations of a managed computing system, comprising:
one or more processors; and
at least one non-transitory computer-readable storage medium having computer-executable instructions stored thereupon which, when executed by the one or more processors, cause the computing system to:
subscribe, by way of a REDFISH-compatible event listener, for notifications that the managed computing system has been reset, wherein:
the notifications are generated by a baseboard management controller of the managed computing system; and
the notifications are transmitted by the baseboard management controller to the management system by way of a first network that is utilized for control of the managed computing system;
receive a notification at the REDFISH-compatible event listener that the managed computing system has been reset from the baseboard management controller by way of the first network;
responsive to receiving the notification that the managed computing system has been reset from the baseboard management controller, transmit a request on a second network for firmware attestation data from a security manager to a platform security agent executing on the managed computing system wherein the second network is utilized for production network traffic, wherein the first network is an out-of-band network that enables the management system to control the managed computing system when the managed computing system is at least one of not reachable via the second network or powered off;
receive the firmware attestation data at the security manager from the platform security agent on the second network; and
expose the firmware attestation data to one or more program components for use in evaluating a trustworthiness of a firmware executing on the managed computing system.
17. The computing system of claim 16 , wherein the security manager is further configured to store the firmware attestation data in a database.
18. The computing system of claim 17 , wherein the at least one non-transitory computer-readable storage medium has further computer-executable instructions stored thereupon to cause an application programming interface server to expose the firmware attestation data stored in the database to the one or more program components.
19. The computing system of claim 18 , wherein the one or more program components comprise one or more of a management console or one or more orchestration systems.