Systems and methods to securely construct a network fabric

1. A method comprising:

receiving a request, by a switch, to set the switch into a provisioning mode where the switch does not enforce secure communications, wherein in the provisioning mode devices in a network are trusted and the devices communicate with each other without establishing cryptographic trust;

while the switch is in the provisioning mode:

establishing a connection from the switch to a provisioning controller;

sending a certificate signing request (CSR) from the switch to the provisioning controller; and

after sending the CSR to the provisioning controller, receiving by the switch, from the provisioning controller, a security certificate generated by a certificate authority; and

entering a lockdown mode, by the switch, after receiving the security certificate, the switch being in the lockdown mode secures communications utilizing the security certificate, wherein while in the lockdown mode control communications between the switch and other switches in the network are encrypted and certified by the certificate authority, wherein in the lockdown mode the switch demands that other switches exchange communications with the switch using encrypted messages, the operations of the method being executed by a processor.

2. The method as recited in claim 1 , wherein the setting the switch into the provisioning mode further includes:

booting up the switch;

requesting software for the switch;

installing received software in the switch;

requesting a configuration from the provisioning controller; and

receiving the configuration, wherein the configuration includes instructions for setting the provisioning mode.

3. The method as recited in claim 1 , further including:

generating a pair of encryption keys by the switch; and

encrypting the CSR with one of the encryption keys before sending the CSR.

4. The method as recited in claim 3 , further including:

storing, after receiving the security certificate, the pair of encryption keys, the security certificate, and a switch certificate in permanent storage of the switch.

5. The method as recited in claim 1 , wherein the certificate authority is part of the provisioning controller, wherein the certificate authority in the provisioning controller generates the security certificate for the switch.

6. The method as recited in claim 1 , wherein the provisioning controller has no network connection to the certificate authority, wherein the provisioning controller presents information to an operator for getting the security certificate from the certificate authority.

7. The method as recited in claim 1 , wherein the switch is being configured for creating a new network, wherein the method further includes:

entering additional switches of the new network into the lockdown mode; and

connecting the new network to an internet after entering all switches into the lockdown mode.

8. The method as recited in claim 1 , wherein after entering the lockdown mode the switch boots up into the lockdown mode when the switch is booted up.

9. A switch comprising:

packet processing circuitry for switching packets;

a memory including instructions; and

one or more computer processors, wherein the instructions, when executed by the one or more computer processors, cause the one or more computer processors to perform operations comprising:

receiving a request, by the switch, to set the switch into a provisioning mode where the switch does not enforce secure communications, wherein in the provisioning mode devices in a network are trusted and the devices communicate with each other without establishing cryptographic trust;

while the switch is in the provisioning mode:

establishing a connection from the switch to a provisioning controller:

sending a certificate signing request (CSR) from the switch to the provisioning controller; and

receiving, from the provisioning controller, a security certificate generated by a certificate authority; and

entering a lockdown mode, by the switch, after receiving the security certificate, the switch while in the lockdown mode secures communications utilizing the security certificate, wherein while in the lockdown mode control communications between the switch and other switches in the network are encrypted and certified by the certificate authority, wherein in the lockdown mode the switch demands that other switches exchange communications with the switch using encrypted messages.

10. The switch as recited in claim 9 , wherein the setting the switch into the provisioning mode further includes:

booting up the switch;

requesting software for the switch;

installing received software in the switch;

requesting a configuration from the provisioning controller; and

receiving the configuration, wherein the configuration includes instructions for setting the provisioning mode.

11. The switch as recited in claim 9 , wherein the one or more computer processors further perform operations including:

generating a pair of encryption keys by the switch;

encrypting the CSR with one of the encryption keys before sending the CSR; and

storing, after receiving the security certificate, the pair of encryption keys, the security certificate, and a switch certificate in permanent storage of the switch.

12. The switch as recited in claim 9 , wherein the certificate authority is part of the provisioning controller, wherein the certificate authority in the provisioning controller generates the security certificate for the switch.

13. The switch as recited in claim 9 , wherein the provisioning controller has no network connection to the certificate authority, wherein the provisioning controller presents information to an operator for getting the security certificate from the certificate authority.

14. A non-transitory machine-readable medium including a set of instructions that, when executed by a machine, causes the machine to perform a set of operations including:

receiving a request, by a switch, to set the switch into a provisioning mode where the switch does not enforce secure communications, wherein in the provisioning mode devices in a network are trusted and the devices communicate with each other without establishing cryptographic trust;

while the switch is in the provisioning mode:

establishing a connection from the switch to a provisioning controller;

sending a certificate signing request (CSR) from the switch to the provisioning controller; and

receiving by the switch, from the provisioning controller, a security certificate generated by a certificate authority; and

entering a lockdown mode, by the switch, after receiving the security certificate, wherein the switch while in the lockdown mode secures communications utilizing the security certificate, wherein while in the lockdown mode control communications between the switch and other switches in the network are encrypted and certified by the certificate authority, wherein in the lockdown mode the switch demands that other switches exchange communications with the switch using encrypted messages.

15. The machine-readable medium as recited in claim 14 , wherein the setting the switch into the provisioning mode further includes:

booting up the switch;

requesting software for the switch;

installing received software in the switch;

requesting a configuration from the provisioning controller; and

receiving the configuration, wherein the configuration includes instructions for setting the provisioning mode.

16. The machine-readable medium as recited in claim 14 , wherein the machine further perform operations including:

generating a pair of encryption keys by the switch;

encrypting the CSR with one of the encryption keys before sending the CSR; and

storing, after receiving the security certificate, the pair of encryption keys, the security certificate, and a switch certificate in permanent storage of the switch.

17. The machine-readable medium as recited in claim 14 , wherein the provisioning controller has no network connection to the certificate authority, wherein the provisioning controller presents information to an operator for getting the security certificate from the certificate authority.

18. The machine-readable medium as recited in claim 14 , wherein after entering the lockdown mode the switch boots up into the lockdown mode when the switch is booted up.

19. The machine-readable medium as recited in claim 14 , wherein, while in the lockdown mode, control communications between trusted switches in a network are encrypted and certified by the certificate authority.

20. A method comprising:

obtaining, by a new controller to be added to a network in lockdown mode, user identification and certificate authority (CA) identification;

requesting, by the new controller, a first security certificate from an existing controller;

receiving, by the new controller, the first security certificate from the existing controller, the existing controller generating the first security certificate for the new controller;

receiving, by the new controller, from an administrator confirmation of the first security certificate;

receiving, by the new controller, from the existing controller a node identifier for the new controller and control information;

generating, by the new controller, a certificate signing request (CSR);

sending the CSR from the new controller to the existing controller; and

receiving, by the new controller, a second controller security certificate associated with the CSR the second controller security certificate being for secure communications between the n controller and other devices certified by the CA.