Method and apparatus for side-band management of security for a server computer
The present embodiments relate to methods and apparatuses for side-band management of security for server computers. According to certain aspects, such management is directed to the security of data that is stored under the local control of the server, as well as data that flows through the network ports of the server. Such locally stored data is secured by encryption, and the encryption keys are managed by a management entity that is separate from the server. The management entity can also manage the security of network data flowing through the server using its own configuration of network security applications such as firewalls, monitors and filters.
1. A server system comprising:
a host complex for running software applications that generate and use data;
a secure complex; and
storage that is at least partially provisioned by an external management entity that communicates with the secure complex, wherein the secure complex is configured to prevent access by the software applications currently running in the host complex to the data in the storage unless and until the storage is provisioned,
wherein the storage comprises a plurality of drives, and
wherein the secure complex, after the provisioning, is configured to allow the applications currently running in the host complex to access provisioned ones of the plurality of drives while preventing the applications from accessing non-provisioned ones of the plurality of drives.