Verification and/or validation of unreversible information handling system commands
An unreversible command is verified and validated pre-execution in an IHS, and execution of the unreversible command is authenticated in the IHS with (a) physical component(s). The physical component(s) may be a pair of pre-registered disks-on-keys (DOKs), wherein the DOKs are simultaneously connected to pre-registered slots of the IHS, and a determination is made whether a serial number of each respective pre-registered DOK is correlated with a respective pre-registered slot number (and IHS motherboard serial number) in a Trusted Platform Module (TPM) of the IHS. Alternatively, or additionally, (the) (a) physical component(s) may be (a) physical token(s) (DOK(s)) produced when a pre-approval for execution of the unreversible command on the IHS is granted, wherein (a) security attribute(s) for execution of the unreversible command on the IHS is/are set and the physical token is signed with a public key which matches a private key stored in a TPM of the IHS.
1. A method for verification and/or validation of unreversible information handling system commands, the method comprising:
verifying an unreversible command in an information handling system;
validating the unreversible command in the information handling system, wherein the verifying and validating take place pre-execution;
authenticating execution of the unreversible command in the information handling system with one or more physical components wherein the one or more physical components comprise two pre-registered disks-on-keys;
receiving connection of the two pre-registered disks-on-keys, generally simultaneously, to pre-registered slots of the information handling system;
determining whether a serial number of each respective pre-registered disk-on-key is correlated with a different respective pre-registered slot number in a trusted platform module of the information handling system;
preventing the execution of the unreversible command on the information handling system, in response to the serial number of each respective pre-registered disk-on-key not being correlated with a different respective pre-registered slot number in the trusted platform module of the information handling system; and
allowing the execution of the unreversible command on the information handling system, in response to the serial number of each respective pre-registered disk-on-key being correlated with the different respective pre-registered slot number in the trusted platform module of the information handling system.
2. The method of claim 1 , further comprising, before the receiving connection of the two pre-registered disks-on-keys to the pre-registered slots of the information handling system:
flashing the serial numbers of each of the disks-on-keys, to the trusted platform module of the information handling system to pre-register the disks-on-keys;
flashing slot numbers of the pre-registered slots to the trusted platform module of the information handling system to the pre-registered slots; and
correlating, in the trusted platform module of the information handling system, the serial number of one of disks-on-keys with one of the slot numbers and the serial number of the other of the disks-on-keys with the other of the slot numbers.
3. The method of claim 2 , wherein flashing the serial numbers of each of the disks-on-keys, to the trusted platform module of the information handling system, flashing the slot numbers of the two slots to the trusted platform module of the information handling system, and
correlating the serial number of one of disks-on-keys with one of the slot numbers and the serial number of the other of the disks-on-keys with the other of the slot numbers, is carried out at a time of manufacture of the information handling system.
4. The method of claim 1 , wherein, the one or more physical components comprises a physical token produced when a pre-approval for the execution of the unreversible command on the information handling system is granted, and the verifying the unreversible command, the validating the unreversible command and the authenticating execution of the unreversible command further comprise:
setting one or more security attributes for the execution of the unreversible command on the information handling system;
including the one or more security attributes in the physical token when the physical token is produced;
signing the physical token with a public key which matches a private key stored in a trusted platform module of the information handling system;
preventing the execution of the unreversible command on the information handling system:
if the public key on the physical token does not match the private key stored in the trusted platform module of the information handling system;
unless the physical token is interfaced with the information handling system; and
allowing the execution of the unreversible command on the information handling system upon:
the physical token being interfaced with the information handling system; and
the public key on the physical token matching the private key stored in the trusted platform module of the information handling system.
5. The method of claim 4 , wherein the one or more security attributes for execution of the unreversible command comprises one or more of an expiration date of root permission from an issuing date of the physical token, shortened time to live for initial engagement with the information handling system, and a list of allowed commands.
6. The method of claim 4 , further comprising presenting the physical token via a disk-on-key.
7. The method of claim 6 , further comprising including the physical token alongside the one or more security attributes and correlated limitations for the one or more security attributes on the disk-on-key.
8. A method for verification and/or validation of unreversible information handling system commands, the method comprising:
receiving connection of two pre-registered disks-on-keys, generally simultaneously, to pre-registered slots of an information handling system;
determining whether a serial number of each respective pre-registered disk-on-key is correlated with a different respective pre-registered slot number in a trusted platform module of the information handling system;
preventing execution of the unreversible command on the information handling system, in response to the serial number of each respective pre-registered disk-on-key not being correlated with a different respective pre-registered slot number in the trusted platform module of the information handling system; and
allowing the execution of the unreversible command on the information handling system, in response to the serial number of each respective pre-registered disk-on-key being correlated with the different respective pre-registered slot number in the trusted platform module of the information handling system.
9. The method of claim 8 , wherein determining whether the serial number of each respective pre-registered disk-on-key is correlated with a different respective pre-registered slot number in the trusted platform module of the information handling system, further comprises determining whether the serial number of each respective pre-registered disk-on-key is correlated with a different respective pre-registered slot number and a serial number of the information handling system's motherboard, in the trusted platform module of the information handling system.
10. The method of claim 8 , wherein determining whether the serial numbers of each respective disk-on-key is correlated with the respective slot numbers in the trusted platform module of the information handling system further comprises determining both of:
whether the serial number of a first disk-on-key is correlated with the slot number of the slot receiving the first disk-on-key, in the trusted platform module of the information handling system; and
whether the serial number of a second disk-on-key is correlated with the slot number of the slot receiving the second disk-on-key, in the trusted platform module of the information handling system.
11. The method of claim 10 , wherein determining whether the serial number of the first disk-on-key is correlated with the slot number of the slot receiving the first disk-on-key and whether the serial number of the second disk-on-key is correlated with the slot number of the slot receiving the second disk-on-key, in the trusted platform module of the information handling system, further comprises determining whether the first and second disks-on-keys are correlated with a serial number of the information handling system's motherboard, in the trusted platform module of the information handling system.
12. The method of claim 8 , further comprising, before the receiving connection of the two pre-registered disks-on-keys, generally simultaneously to the pre-registered slots of the information handling system:
flashing the serial numbers of each of the disks-on-keys, to the trusted platform module of the information handling system to pre-register the disks-on-keys;
flashing the slot numbers of the two slots to the trusted platform module of the information handling system to the pre-registered slots; and
correlating, in the trusted platform module of the information handling system, the serial number of one of disks-on-keys with one of the slot numbers and the serial number of the other of the disks-on-keys with the other of the slot numbers.
13. The method of claim 12 , wherein correlating the serial number of one of disks-on-keys with one of the slot numbers and the serial number of the other of the disks-on-keys with the other of the slot numbers, further comprises correlating, in the trusted platform module of the information handling system, the serial numbers of each of disks-on-keys with a serial number of the information handling system's motherboard.
14. The method of claim 13 , wherein flashing the serial numbers of each of the disks-on-keys, to the trusted platform module of the information handling system, flashing the slot numbers of the two slots to the trusted platform module of the information handling system, and
correlating the serial number of one of disks-on-keys with one of the slot numbers and the serial number of the other of the disks-on-keys with the other of the slot numbers, is carried out at a time of manufacture of the information handling system.
15. A method for verification and/or validation of unreversible information handling system commands, the method comprising:
setting one or more security attributes for execution of a unreversible command on an information handling system;
creating a physical token produced when a pre-approval for execution of the unreversible command on the information handling system is granted, the physical token including the one or more security attributes;
signing the physical token with a public key which matches a private key stored in a trusted platform module of the information handling system;
preventing the execution of the unreversible command on the information handling system:
if the public key on the physical token does not match the private key stored in the trusted platform module of the information handling system;
unless the physical token is interfaced with the information handling system; and
allowing execution of the unreversible command on the information handling system upon:
the physical token being interfaced with the information handling system; and
the public key on the physical token matching the private key stored in the trusted platform module of the information handling system.
16. The method of claim 15 , further comprising presenting the physical token via a disk-on-key.
17. The method of claim 16 further comprising including the physical token alongside the one or more security attributes and correlated limitations for the one or more security attributes on the disk-on-key.
18. The method of claim 15 , wherein the one or more security attributes for execution of the unreversible command comprises one or more of an expiration date of root permission from an issuing date of the physical token, shortened time to live for initial engagement with the information handling system, and a list of allowed commands.
19. The method of claim 15 , wherein the unreversible command is a particular unreversible command and/or the information handling system is a particular information handling system.