Onboarding for cloud-based management
In some examples, a cloud-based management system receives information identifying electronic devices to be onboarded for cloud-based management by the cloud-based management system, receives, from a first electronic device, a request to establish a secure connection between the cloud-based management system and the first electronic device, and receives, from the first electronic device, a certificate. The cloud-based management system confirms, based on information in the certificate and the information identifying the electronic devices to be onboarded for cloud-based management, that the cloud-based management system is to perform the cloud-based management of the first electronic device over the secure connection.
1. A non-transitory machine-readable storage medium comprising instructions that upon execution cause a cloud-based management system to:
receive information including identifiers of electronic devices to be onboarded for cloud-based management by the cloud-based management system;
in response to receiving the information, add the identifiers of the electronic devices to be onboarded for cloud-based management to cloud-based management information;
receive, from a first electronic device, a request to establish a secure connection between the cloud-based management system and the first electronic device;
receive, from the first electronic device, a certificate comprising an identifier of the first electronic device;
confirm, based on comparing the identifier of the first electronic device in the certificate and the identifiers of the electronic devices to be onboarded for cloud-based management contained in the cloud-based management information, that the cloud-based management system is to perform cloud-based management of the first electronic device over the secure connection;
receive, at the cloud-based management system, health data in a packet from the first electronic device over the secure connection, the packet further containing the identifier of the first electronic device; and
verify that the first electronic device that sent the health data is selected for cloud-based management based on comparing, at the cloud-based management system, the identifier of the first electronic device contained in the packet with the identifiers of the electronic devices in the cloud-based management information.
2. The non-transitory machine-readable storage medium of claim 1 , wherein the identifiers of the electronic devices to be onboarded for cloud-based management are provided based on customer input at a portal coupled to the cloud-based management system.
3. The non-transitory machine-readable storage medium of claim 1 , wherein the identifiers of the electronic devices to be onboarded for cloud-based management are included in a collection of events, wherein each event of the collection of events includes a respective identifier of the identifiers of the electronic devices.
4. The non-transitory machine-readable storage medium of claim 3 , wherein each event of the collection of events is sent by a computer responsive to a selection of a respective electronic device to be onboarded for cloud-based management.
5. The non-transitory machine-readable storage medium of claim 1 , wherein the request to establish the secure connection is sent to a location identified by cloud-based management system endpoint information, and wherein the cloud-based management system endpoint information was provided to the first electronic device as part of a device activation process to activate the first electronic device.
6. The non-transitory machine-readable storage medium of claim 1 , wherein the packet comprises a header that contains the identifier of the first electronic device.
7. The non-transitory machine-readable storage medium of claim 1 , wherein the instructions upon execution cause the cloud-based management system to further:
establish the secure connection between the cloud-based management system and the first electronic device in response to the cloud-based management system confirming to perform cloud-based management of the first electronic device over the secure connection.
8. The non-transitory machine-readable storage medium of claim 1 , wherein the instructions upon execution cause the cloud-based management system to further:
send a management registration request to the first electronic device to register handling of events from the first electronic device.
9. The non-transitory machine-readable storage medium of claim 1 , wherein the instructions upon execution cause the cloud-based management system to further:
tear down the secure connection on a scheduled basis.
10. A cloud-based management system comprising:
a processor; and
a non-transitory storage medium storing instructions executable on the processor to:
receive information including identifiers of electronic devices to be onboarded for cloud-based management by the cloud-based management system;
in response to receiving the information, add the identifiers of the electronic devices to be onboarded for cloud-based management to cloud-based management information;
receive, from a first electronic device, a request to establish a secure connection between the cloud-based management system and the first electronic device;
receive, from the first electronic device, a certificate comprising an identifier of the first electronic device;
confirm, based on comparing the identifier of the first electronic device in the certificate and the identifiers of the electronic devices to be onboarded for cloud-based management contained in the cloud-based management information, that the cloud-based management system is to perform cloud-based management of the first electronic device over the secure connection;
receive, at the cloud-based management system, health data in a packet from the first electronic device over the secure connection, the packet further containing the identifier of the first electronic device; and
verify that the first electronic device that sent the health data is selected for cloud-based management based on comparing, at the cloud-based management system, the identifier of the first electronic device contained in the packet with the identifiers of the electronic devices in the cloud-based management information.
11. The cloud-based management system of claim 10 , wherein the identifiers of the electronic devices to be onboarded for cloud-based management are included in a collection of events, wherein each event of the collection of events includes a respective identifier of the identifiers of the electronic devices.
12. The cloud-based management system of claim 11 , wherein each event of the collection of events is sent by a computer responsive to a selection of a respective electronic device to be onboarded for cloud-based management.
13. The cloud-based management system of claim 10 , wherein the request to establish the secure connection is sent to a location identified by cloud-based management system endpoint information, and wherein the cloud-based management system endpoint information was provided to the first electronic device as part of a device activation process to activate the first electronic device.
14. The cloud-based management system of claim 10 , wherein the packet comprises a header that contains the identifier of the first electronic device.
15. The cloud-based management system of claim 10 , wherein the instructions are executable on the processor to:
send a management registration request to the first electronic device to register handling of events from the first electronic device.
16. The cloud-based management system of claim 10 , wherein the instructions are executable on the processor to:
tear down the secure connection on a scheduled basis.
17. A method of a cloud-based management system comprising a hardware processor, comprising:
receiving, at the cloud-based management system, information including identifiers of electronic devices to be onboarded for cloud-based management by the cloud-based management system;
in response to receiving the information, adding the identifiers of the electronic devices to be onboarded for cloud-based management to cloud-based management information;
receiving, at the cloud-based management system from a first electronic device, a request to establish a secure connection between the cloud-based management system and the first electronic device;
receiving, at the cloud-based management system from the first electronic device, a certificate comprising an identifier of the first electronic device;
confirming, by the cloud-based management system based on comparing the identifier of the first electronic device in the certificate and the identifiers of the electronic devices to be onboarded for cloud-based management contained in the cloud-based management information, that the cloud-based management system is to perform cloud-based management of the first electronic device over the secure connection;
receiving, at the cloud-based management system, health data in a packet from the first electronic device over the secure connection, the packet further containing the identifier of the first electronic device; and
verifying that the first electronic device that sent the health data is selected for cloud-based management based on comparing, by the cloud-based management system, the identifier of the first electronic device contained in the packet with the identifiers of the electronic devices in the cloud-based management information.
18. The method of claim 17 , wherein the identifiers of the electronic devices to be onboarded for cloud-based management are provided based on input at a portal coupled to the cloud-based management system.
19. The method of claim 17 , further comprising:
sending, from the cloud-based management system, a management registration request to the first electronic device to register handling of events from the first electronic device.
20. The method of claim 17 , further comprising:
tearing down, by the cloud-based management system, the secure connection on a scheduled basis.