Management of configuration of data processing systems
Methods and systems for managing configuration of data processing systems are disclosed. Configuration of data processing systems may be managed by limiting connectivity to components of data processing systems and credentialing access for the components. To enable access to components of data processing systems, the operation of the components may be updated for limited durations of time to allow various devices to communicate with these components. While allowed to communicate, the components of the data process system may restrict access to credentialed users.
1. A method of managing data processing systems, the method comprising:
obtaining, by hardware resources of a data processing system of the data processing systems, a security request for access to a management controller of the data processing system to configure the management controller;
deploying, by the hardware resources, a security package to the management controller to place the management controller in a configurable state of operation to enable remote secure configuration of the management controller;
obtaining, by the hardware resources and from the management controller, a configuration for validation;
attempting, by the hardware resources and responsive to the obtaining of the configuration, to verify that the configuration is a trusted configuration;
reverting, by the hardware resources and responsive to the obtaining of the configuration, the management controller to a secure state of operation; and
in an instance of the attempting where the configuration is verified as a trusted configuration:
configuring, by the hardware resources, the management controller to obtain an updated secure state of operation of the management controller.
2. The method of claim 1 , wherein while the management controller is in the secure state of operation, a user device is unable to operably connect to the management controller.
3. The method of claim 2 , wherein while the management controller is in the configurable state of operation, the user device is able to operably connect to the management controller.
4. The method of claim 1 , wherein the security package comprises a container, and the management controller is configured to deploy the container to enter the configurable state of operation.
5. The method of claim 4 , wherein the container comprises a set of credentials defined by a control plane that manages operation of the data processing system.
6. The method of claim 5 , further comprising:
obtaining, by the hardware resources, the credentials from the management controller.
7. The method of claim 6 , wherein the container comprises a configuration application adapted to enable a user that uses the credentials to access the management controller to view and modifying configurations of the management controller.
8. The method of claim 1 , further comprising:
identifying, by the hardware resources, that a duration of time from when the time at which the management controller began to operate in the configurable state,
wherein the reverting is initiated responsive to an occurrence of the duration of time.
9. The method of claim 1 , wherein the management controller is an independently operating data processing system hosted by the data processing system, and the hardware resources are distinct from the management controller.
10. The method of claim 9 , wherein the management controller comprises a system on a chip.
11. A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for managing data processing systems, the operations comprising:
obtaining, by hardware resources of a data processing system of the data processing systems, a security request for access to a management controller of the data processing system to configure the management controller;
deploying, by the hardware resources, a security package to the management controller to place the management controller in a configurable state of operation to enable remote secure configuration of the management controller;
obtaining, by the hardware resources and from the management controller, a configuration for validation;
attempting, by the hardware resources and responsive to the obtaining of the configuration, to verify that the configuration is a trusted configuration;
reverting, by the hardware resources and responsive to the obtaining of the configuration, the management controller to a secure state of operation; and
in an instance of the attempting where the configuration is verified as a trusted configuration:
configuring, by the hardware resources, the management controller to obtain an updated secure state of operation of the management controller.
12. The non-transitory machine-readable medium of claim 11 , wherein while the management controller is in the secure state of operation, a user device is unable to operably connect to the management controller.
13. The non-transitory machine-readable medium of claim 12 , wherein while the management controller is in the configurable state of operation, the user device is able to operably connect to the management controller.
14. The non-transitory machine-readable medium of claim 11 , wherein the security package comprises a container, and the management controller is configured to deploy the container to enter the configurable state of operation.
15. The non-transitory machine-readable medium of claim 14 , wherein the container comprises a set of credentials defined by a control plane that manages operation of the data processing system.
16. A data processing system, comprising:
a management controller;
hardware resources comprising a processor; and
a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform operations, the operations comprising:
obtaining, by the hardware resources, a security request for access to the management controller to configure the management controller;
deploying, by the hardware resources, a security package to the management controller to place the management controller in a configurable state of operation to enable remote secure configuration of the management controller;
obtaining, by the hardware resources and from the management controller, a configuration for validation;
attempting, by the hardware resources and responsive to the obtaining of the configuration, to verify that the configuration is a trusted configuration;
reverting, by the hardware resources and responsive to the obtaining of the configuration, the management controller to a secure state of operation; and
in an instance of the attempting where the configuration is verified as a trusted configuration:
configuring, by the hardware resources, the management controller to obtain an updated secure state of operation of the management controller.
17. The data processing system of claim 16 , wherein while the management controller is in the secure state of operation, a user device is unable to operably connect to the management controller.
18. The data processing system of claim 17 , wherein while the management controller is in the configurable state of operation, the user device is able to operably connect to the management controller.
19. The data processing system of claim 16 , wherein the security package comprises a container, and the management controller is configured to deploy the container to enter the configurable state of operation.
20. The data processing system of claim 19 , wherein the container comprises a set of credentials defined by a control plane that manages operation of the data processing system.