Access control management of baseboard management controller peripherals
Described is a baseboard management controller (BMC). The BMC comprises a BMC flash storage storing firmware and an access permission table. The access permission table defines an access control policy for access requests to peripherals communicatively coupled to the BMC. The BMC further comprises an access control chip comprising one or more processors and a write-once memory. The write-once memory stores a copy of the access permission table. The access control chip is configured to manage access to the peripherals using the access permission table.
1. A baseboard management controller (BMC) comprising:
a BMC flash storage storing firmware and an access permission table, wherein the access permission table defines an access control policy for access requests to peripherals communicatively coupled to the BMC; and
an access control chip comprising one or more processors and a write-once memory, wherein the write-once memory stores a copy of the access permission table, and wherein the access control chip is configured to manage access to the peripherals using the access permission table.
2. The BMC of claim 1 , wherein the access permission table defines a permission for respective combinations of target, requestor identifier (ID), access type, and address range.
3. The BMC of claim 1 , wherein the firmware is configured to validate an integrity of the access permission table during boot-up of the BMC, and, in response to validating the integrity of the access permission table, write the access permission table to the write-once memory.
4. The BMC of claim 1 , wherein the access permission table is stored in the BMC flash as part of a firmware update of the BMC.
5. The BMC of claim 1 , wherein the access control chip is configured to mitigate malicious access requests to the peripherals from a server communicatively coupled to the BMC.
6. The BMC of claim 1 , wherein the peripherals are selected from a group consisting of: sensors, fans, and light emitting diodes (LEDs).
7. The BMC of claim 1 , wherein the peripherals comprise communication links selected from a group consisting of: Peripheral Component Interconnect (PCI) links, and Ethernet links.
8. The BMC of claim 1 , wherein the peripherals comprise flash storage devices.
9. A system comprising:
a server;
a baseboard management controller (BMC), wherein the BMC is communicatively coupled to the server and comprises a BMC flash storage storing firmware and an access permission table;
a plurality of peripherals communicatively coupled to the BMC; and
an access control chip communicatively coupled to the BMC, wherein the access control chip comprises one or more processors and a write-once memory, wherein the write-once memory is configured to store a copy of the access permission table, wherein the access permission table defines an access control policy for access requests to the plurality of peripherals, and wherein the access control chip is configured to manage access to the plurality of peripherals using the access permission table.
10. The system of claim 9 , wherein the access permission table defines a permission for respective combinations of target, requestor identifier (ID), access type, and address range.
11. The system of claim 9 , wherein the firmware is configured to validate an integrity of the access permission table during boot-up of the BMC, and, in response to validating the integrity of the access permission table, write the access permission table to the write-once memory.
12. The system of claim 9 , wherein the access permission table is stored in the BMC flash as part of a firmware update of the BMC.
13. The system of claim 9 , wherein the access control chip is configured to mitigate malicious access requests to the peripherals from the server.
14. A computer-implemented method comprising:
storing an access permission table in a flash storage of a baseboard management controller (BMC), wherein the access permission table defines an access control policy for access requests to peripherals communicatively coupled to the BMC;
performing a secure boot cycle of the BMC;
copying the access permission table from the flash storage of the BMC to a write-once memory of an access control chip communicatively coupled to the BMC;
detecting an access request for a peripheral communicatively coupled to the BMC; and
determining whether the access request is allowed based on the access permission table stored in the write-once memory.
15. The method of claim 14 , wherein the access permission table is stored in the flash storage of the BMC as part of a firmware update of the BMC.
16. The method of claim 14 , wherein performing the secure boot cycle of the BMC further comprises verifying an integrity of the access permission table.
17. The method of claim 14 , wherein the access permission table defines a permission for respective combinations of target, requestor identifier (ID), access type, and address range.
18. The method of claim 14 , wherein the access control chip is configured to mitigate malicious access requests to the peripherals from a server communicatively coupled to the BMC.
19. The method of claim 14 , further comprising:
determining that the access request is allowed based on the access permission table; and
allowing the access request.
20. The method of claim 14 , further comprising:
determining that the access request is not allowed based on the access permission table; and
issuing a machine check exception (MCE).