Secure remote support for edge computing platform
A disclosed method for providing a non-credentialed user (NCU) with secure access to a remote endpoint of an edge computing platform, generates a support voucher for the NCU wherein the support voucher comprises a temporary ownership voucher including one or more digital signatures establishing a chain of trust from a root of trust to the NCU. The method provides a private key associated with the support voucher to the NCU. Responsive to detecting the NCU, using the private key to log into an edge platform resource and determining that the support voucher is recognized by the edge platform resource, the NCU is authenticated and the support voucher is validated to establish the NCU as a designated owner of the remote endpoint. Responsive to establishing the NCU as a designated owner, the NCU may access the edge platform resource and from there access the platform endpoint.
1 . A method for providing a non-credentialed user (NCU) with secure access to a remote endpoint of an edge computing platform, where the method includes:
generating a support voucher for the NCU wherein the support voucher comprises a temporary ownership voucher including one or more digital signatures establishing a chain of trust from a root of trust to the NCU;
providing a private key associated with the support voucher to the NCU;
responsive to detecting the NCU using the private key to log into an edge platform resource and determining that the support voucher is recognized by the edge platform resource, authenticating the NCU and validating the support voucher to establish the NCU as a designated owner of the remote endpoint; and
responsive to establishing the NCU as a designated owner, granting the NCU access to the edge platform resource and wherein the edge platform resource includes a tool to access the platform endpoint.
2 . The method of claim 1 , wherein the edge platform resource is an edge orchestrator (EO).
3 . The method of claim 2 , wherein the EO is a registered owner of the remote endpoint.
4 . The method of claim 2 , wherein the EO is a higher level EO than a registered owner of the remote endpoint.
5 . The method of claim 1 , wherein the remote endpoint comprises an edge compute endpoint.
6 . The method of claim 1 , wherein the remote endpoint comprises an external compute fabric.
7 . An information handling system, comprising:
a central processing unit (CPU);
a computer readable memory including processor executable instructions that, when executed by the CPU, cause the information handling system to perform operations for providing a non-credentialed user (NCU) with secure access to a remote endpoint of an edge computing platform, where the operations include:
generating a support voucher for the NCU wherein the support voucher comprises a temporary ownership voucher including one or more digital signatures establishing a chain of trust from a root of trust to the NCU;
providing a private key associated with the support voucher to the NCU;
responsive to detecting the NCU, using the private key to log into an edge platform resource and determining that the support voucher is recognized by the edge platform resource, authenticating the NCU, and validating the support voucher to establish the NCU as a designated owner of the remote endpoint; and
responsive to establishing the NCU as a designated owner, granting the NCU access to the edge platform resource and wherein the edge platform resource includes a tool to access the platform endpoint.
8 . The information handling system of claim 7 , wherein the edge platform resource is an edge orchestrator (EO).
9 . The information handling system of claim 8 , wherein the EO is a registered owner of the remote endpoint.
10 . The information handling system of claim 8 , wherein the EO is a higher level EO than a registered owner of the remote endpoint.
11 . The information handling system of claim 7 , wherein the remote endpoint comprises an edge compute endpoint.
12 . The information handling system of claim 7 , wherein the remote endpoint comprises an external compute fabric.
13 . A non-transitory computer readable medium including processor executable instructions that, when executed by a processor of an information handling system, cause the information handling system to perform operations for providing a non-credentialed user (NCU) with secure access to a remote endpoint of an edge computing platform, where the operations include:
generating a support voucher for the NCU wherein the support voucher comprises a temporary ownership voucher including one or more digital signatures establishing a chain of trust from a root of trust to the NCU;
providing a private key associated with the support voucher to the NCU;
responsive to detecting the NCU, using the private key to log into an edge platform resource and determining that the support voucher is recognized by the edge platform resource, authenticating the NCU, and validating the support voucher to establish the NCU as a designated owner of the remote endpoint; and
responsive to establishing the NCU as a designated owner, granting the NCU access to the edge platform resource and wherein the edge platform resource includes a tool to access the platform endpoint.
14 . The non-transitory computer readable medium of claim 13 , wherein the edge platform resource is an edge orchestrator (EO).
15 . The non-transitory computer readable medium of claim 14 , wherein the EO is a registered owner of the remote endpoint.
16 . The non-transitory computer readable medium of claim 14 , wherein the EO is a higher level EO than a registered owner of the remote endpoint.
17 . The non-transitory computer readable medium of claim 13 , wherein the remote endpoint comprises an edge compute endpoint.
18 . The non-transitory computer readable medium of claim 13 , wherein the remote endpoint comprises an external compute fabric.