System and method to secure renegotiation of connections between a baseboard management controller and a hosted agent
An information handling system includes a processor, a baseboard management controller (BMC) agent that establishes a Transport Layer Security (TLS) session including a first cryptographic parameter shared between the BMC and the BMC agent, receives a request to register the BMC agent with the BMC via the TLS session, and provides a second cryptographic parameter to the BMC agent. The BMC establishes a second TLS session including a third cryptographic parameter, determines that the second TLS session is suspected of being from a malicious agent, and renegotiates with the BMC agent using the second cryptographic parameter within the TLS session to share a fourth cryptographic parameter between the BMC and the first BMC agent in response to determining that the second TLS session is suspect.
1. An information handling system, comprising:
a processor that executes a first baseboard management controller (BMC) agent; and
a BMC configured to communicate with the processor, the BMC configured to:
establish a first Transport Layer Security (TLS) session with the first BMC agent, wherein the first TLS session includes a first cryptographic parameter shared between the BMC and the first BMC agent;
receive a first request from the first BMC agent via the first TLS session, the first request to register the first BMC agent with the BMC;
provide a second cryptographic parameter to the first BMC agent in response to the first request;
establish a second TLS session, wherein the second TLS session includes a third cryptographic parameter;
determine that the second TLS session is suspected of being from a malicious agent; and
renegotiate with the first BMC agent using the second cryptographic parameter within the first TLS session to share a fourth cryptographic parameter between the BMC and the first BMC agent in response to determining that the second TLS session is suspect.
2. The information handling system of claim 1 , wherein the second cryptographic parameter is a symmetric encryption key.
3. The information handling system of claim 1 , wherein the second cryptographic parameter is a BMC public/private key pair and a BMC agent public/private key pair.
4. The information handling system of claim 1 , wherein the BMC is further configured to:
determine that no request for registration with the BMC is received in association with the second TLS session, wherein the determination that the second TLS session is suspected of being from a malicious agent is based upon the determination that no request for registration with the BMC was received in association with the second TLS session.
5. The information handling system of claim 1 , wherein the BMC is further configured to:
determine that the second TLS session is associated with a directed denial of service (DDOS) attack, wherein the determination that the second TLS session is suspected of being from a malicious agent is based upon the determination that the second TLS session is associated with the DDOS attack.
6. The information handling system of claim 1 , wherein the BMC is further configured to:
establish a third TLS session with a second BMC agent, wherein the third TLS session includes a fifth cryptographic parameter shared between the BMC and the second BMC agent;
receive a second request from the second BMC agent via the third TLS session, the second request to register the second BMC agent with the BMC;
provide a sixth cryptographic parameter to the second BMC agent in response to the second request; and
renegotiate with the second BMC agent using the sixth cryptographic parameter within the third TLS session to share a seventh cryptographic parameter between the BMC and the second BMC agent in further response to determining that the second TLS session is suspect.
7. The information handling system of claim 6 , wherein the second and sixth cryptographic parameters are a common cryptographic parameter.
8. The information handling system of claim 7 , wherein in renegotiating with the first and second BMC agents, the BMC broadcasts a renegotiation request encrypted based upon the common cryptographic parameter.
9. The information handling system of claim 6 , wherein the second and sixth cryptographic parameters are different cryptographic parameters.
10. The information handling system of claim 9 , wherein:
in renegotiating with the first BMC agent, the BMC sends a first renegotiation request encrypted based upon the second cryptographic parameter to the first BMC agent; and
in renegotiating with the second BMC agent, the BMC sends a second renegotiation request encrypted based upon the sixth cryptographic parameter to the second BMC agent.
11. A method, comprising:
establishing, by a baseboard management controller (BMC) of an information handling system, a first Transport Layer Security (TLS) session with a first BMC agent of the information handling system, wherein the first TLS session includes a first cryptographic parameter shared between the BMC and the first BMC agent;
receiving, by the BMC, a first request from the first BMC agent via the first TLS session, the first request to register the first BMC agent with the BMC;
providing, by the BMC, a second cryptographic parameter to the first BMC agent in response to the first request;
establishing, by the BMC, a second TLS session, wherein the second TLS session includes a third cryptographic parameter;
determining, by the BMC, that the second TLS session is suspected of being from a malicious agent; and
renegotiating, by the BMC, with the first BMC agent using the second cryptographic parameter within the first TLS session to share a fourth cryptographic parameter between the BMC and the first BMC agent in response to determining that the second TLS session is suspect.
12. The method of claim 11 , wherein the second cryptographic parameter is a symmetric encryption key.
13. The method of claim 11 , wherein the second cryptographic parameter is a BMC public/private key pair and a BMC agent public/private key pair.
14. The method of claim 11 , further comprising:
determining, by the BMC, that no request for registration with the BMC is received in association with the second TLS session, wherein the determination that the second TLS session is suspected of being from a malicious agent is based upon the determination that no request for registration with the BMC was received in association with the second TLS session.
15. The method of claim 11 , further comprising:
determining, by the BMC, that the second TLS session is associated with a directed denial of service (DDOS) attack, wherein the determination that the second TLS session is suspected of being from a malicious agent is based upon the determination that the second TLS session is associated with the DDOS attack.
16. The method of claim 11 , further comprising:
establishing, by the BMC, a third TLS session with a second BMC agent, wherein the third TLS session includes a fifth cryptographic parameter shared between the BMC and the second BMC agent;
receiving, by the BMC, a second request from the second BMC agent via the third TLS session, the second request to register the second BMC agent with the BMC;
providing, by the BMC, a sixth cryptographic parameter to the second BMC agent in response to the second request; and
renegotiating, by the BMC, with the second BMC agent using the sixth cryptographic parameter within the third TLS session to share a seventh cryptographic parameter between the BMC and the second BMC agent in further response to determining that the second TLS session is suspect.
17. The method of claim 16 , wherein the second and sixth cryptographic parameters are a common cryptographic parameter.
18. The method of claim 17 , wherein the second and sixth cryptographic parameters are different cryptographic parameters.
19. A baseboard management controller (BMC) of an information handling system, the BMC comprising:
a processor; and
a memory in communication with the processor and storing code to:
establish a first Transport Layer Security (TLS) session with a first BMC agent of the information handling system, wherein the first TLS session includes a first cryptographic parameter shared between the BMC and the first BMC agent;
receive a first request from the first BMC agent via the first TLS session, the first request to register the first BMC agent with the BMC;
provide a second cryptographic parameter to the first BMC agent in response to the first request;
establish a second TLS session, wherein the second TLS session includes a third cryptographic parameter;
determine that the second TLS session is suspected of being from a malicious agent; and
renegotiate with the first BMC agent using the second cryptographic parameter within the first TLS session to share a fourth cryptographic parameter between the BMC and the first BMC agent in response to determining that the second TLS session is suspect.
20. The BMC of claim 19 , wherein the code is further configured to:
establish a third TLS session with a second BMC agent, wherein the third TLS session includes a fifth cryptographic parameter shared between the BMC and the second BMC agent;
receive a second request from the second BMC agent via the third TLS session, the second request to register the second BMC agent with the BMC;
provide a sixth cryptographic parameter to the second BMC agent in response to the second request; and
renegotiate with the second BMC agent using the sixth cryptographic parameter within the third TLS session to share a seventh cryptographic parameter between the BMC and the second BMC agent in further response to determining that the second TLS session is suspect.