Managing sanitization of data processing systems using out-of-band methods
Methods and systems for managing a data processing system are disclosed. A management controller of the data processing system may provide a sanitization request to a policy management server using an out-of-band communication channel. The management controller may obtain a response to the sanitization request from the policy management server via the out-of-band communication channel. The response may indicate whether performance of a sanitization process is authorized. The authorization may be based on a sanitization policy that governs sanitizations for the data processing system. If performance of the sanitization process is authorized, then the management controller may initiate and/or perform an action set based on the sanitization policy in order to complete the sanitization process, thereby placing the data processing system in a safe state.
1 . A method for managing a data processing system, the method comprising:
providing, by a management controller of the data processing system and via an out-of-band communication channel that is provided by a network module of the data processing system that also provides in-band communication channels and the out-of-band communication channel also bypassing hardware resources of the data processing system that participate in performance of at least a portion of an action set, a sanitization request to a policy management server;
obtaining, by the management controller and via the out-of-band communication channel, a response to the sanitization request from the policy management server, the response indicating whether performance of a sanitization process is authorized based, at least in part, on a sanitization policy that, at least in part, governs sanitizations for the data processing system; and
in a first instance of the obtaining, where the performance of the sanitization process is authorized:
performing, by, at least in part, the management controller, the action set based on the sanitization policy in order to complete the performance of the sanitization process to place the data processing system in a safe state.
2 . The method of claim 1 , further comprising:
prior to providing the sanitization request:
obtaining, by the management controller, instructions to initiate the sanitization process from the hardware resources of the data processing system.
3 . The method of claim 1 , further comprising:
prior to providing the sanitization request:
obtaining, by the management controller and via the out-of-band communication channel, instructions to initiate the sanitization process from the policy management server.
4 . The method of claim 1 , wherein performing the action set comprises deleting a portion of data stored on the data processing system.
5 . The method of claim 4 , wherein performing the action set further comprises providing a sanitization status to the policy management server.
6 . The method of claim 1 , wherein after placing the data processing system in the safe state, sensitive data previously stored on the data processing system is unrecoverable from the data processing system.
7 . The method of claim 6 , wherein the sensitive data comprises at least one type of sensitive data from a list of types of sensitive data consisting of:
a fingerprint;
a password;
device-specific provisioning data; and
owner-specific provisioning data.
8 . The method of claim 1 , wherein the data processing system comprises a network module adapted to separately advertise network endpoints for the management controller and the hardware resources of the data processing system, the network endpoints being usable by the policy management server to address communications to the hardware resources and the management controller.
9 . The method of claim 8 , wherein the out-of-band communication channel runs through the network module, and an in-band communication channel that services the hardware resources also runs through the network module.
10 . The method of claim 9 , wherein the management controller and the network module are on separate power domains from the hardware resources so that the management controller and the network module are operable while the hardware resources are inoperable.
11 . The method of claim 10 , wherein the response is obtained while the hardware resources are inoperable due to being unpowered.
12 . The method of claim 10 , wherein the sanitization process is performed while at least a portion of the hardware resources are inoperable due to being unpowered.
13 . The method of claim 1 , wherein the hardware resources are adapted to provide desired computer implemented services using the in-band communication channels, the in-band communication channels bypassing the management controller, the in-band communication channels and the out-of-band communication channel facilitating separate addressing of the hardware resources and the management controller, and the in-band communication channels and the out-of-band communication channel being distinct physical layer channels.
14 . The method of claim 1 , wherein at least a portion of the hardware resources are unpowered when the response is obtained, and the at least the portion of the hardware resources are unpowered during performance of some of the action set.
15 . A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for managing a data processing system, the operations comprising:
providing, by a management controller of the data processing system and via an out-of-band communication channel that is provided by a network module of the data processing system that also provides in-band communication channels and the out-of-band communication channel also bypassing hardware resources of the data processing system that participate in performance of at least a portion of an action set, a sanitization request to a policy management server;
obtaining, by the management controller and via the out-of-band communication channel, a response to the sanitization request from the policy management server, the response indicating whether performance of a sanitization process is authorized based, at least in part, on a sanitization policy that, at least in part, governs sanitizations for the data processing system; and
in a first instance of the obtaining, where the performance of the sanitization process is authorized:
performing, by, at least in part, the management controller, the action set based on the sanitization policy in order to complete the performance of the sanitization process to place the data processing system in a safe state.
16 . The non-transitory machine-readable medium of claim 15 , wherein the operations further comprise:
prior to providing the sanitization request:
obtaining, by the management controller, instructions to initiate the sanitization process from the hardware resources of the data processing system.
17 . The non-transitory machine-readable medium of claim 15 , wherein the operations further comprise:
prior to providing the sanitization request:
obtaining, by the management controller and via the out-of-band communication channel, instructions to initiate the sanitization process from the policy management server.
18 . The non-transitory machine-readable medium of claim 17 , wherein in the first instance of the obtaining, where the performance of the sanitization process is authorized, the response confirming, to the management controller, that the instructions have been authenticated by the policy management server.
19 . A data processing system, comprising:
a processor; and
a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform operations for managing the data processing system, the operations comprising:
providing, by a management controller of the data processing system and via an out-of-band communication channel that is provided by a network module of the data processing system that also provides in-band communication channels and the out-of-band communication channel also bypassing hardware resources of the data processing system that participate in performance of at least a portion of an action set, a sanitization request to a policy management server;
obtaining, by the management controller and via the out-of-band communication channel, a response to the sanitization request from the policy management server, the response indicating whether performance of a sanitization process is authorized based, at least in part, on a sanitization policy that, at least in part, governs sanitizations for the data processing system; and
in a first instance of the obtaining, where the performance of the sanitization process is authorized:
performing, by, at least in part, the management controller, the action set based on the sanitization policy in order to complete the performance of the sanitization process to place the data processing system in a safe state.
20 . The data processing system of claim 19 , wherein the operations further comprise:
prior to providing the sanitization request:
obtaining, by the management controller, instructions to initiate the sanitization process from the hardware resources of the data processing system.