Techniques to verify and authenticate resources in a data center computer environment
Embodiments are generally directed apparatuses, methods, techniques and so forth to receive a sled manifest comprising identifiers for physical resources of a sled, receive results of an authentication and validation operations performed to authenticate and validate the physical resources of the sled, determine whether the results of the authentication and validation operations indicate the physical resources are authenticate or not authenticate. Further and in response to the determination that the results indicate the physical resources are authenticated, permit the physical resources to process a workload, and in response to the determination that the results indicate the physical resources are not authenticated, prevent the physical resources from processing the workload.
1. An apparatus, comprising:
a processor; and
memory comprising instructions that when executed by the processor cause the processor to:
retrieve a sled manifest stored in a secure memory of a sled, the sled manifest to include hardware authentication information for multiple physical resources of the sled, the hardware authentication information to include a public key to verify each physical resource of the sled;
generate a nonce,
communicate the nonce to a physical resource of the sled,
receive a signed version of the nonce from the physical resource, the signed version of the nonce signed with a private key of the physical resource, and
determine whether the physical resource is authentic based in part on the signed version of the nonce and the public key of the physical resource included with the hardware authentication information from the sled manifest.
2. The apparatus of claim 1 , the memory comprising instructions that when executed by the processor cause the processor to permit the physical resources to process a workload in response to a determination that the physical resource is authentic.
3. The apparatus of claim 1 , the memory comprising instructions that when executed by the processor cause the processor to prevent the physical resources from processing a workload in response to a determination that the physical resource is not authentic.
4. The apparatus of claim 1 , the memory comprising instructions that when executed by the processor cause the processor to determine whether the physical resource is authentic based in part on the signed version of the nonce and the public key, the public key obtained from an original manufacturer of the physical resource.
5. The apparatus of claim 1 , the memory comprising instructions that when executed by the processor cause the processor to add an indication of the physical resources in a database in response to a determination that the physical resource is authentic.
6. The apparatus of claim 1 , the memory comprising instructions that when executed by the processor cause the processor to generate a composed node comprising the physical resources of the sled in response to a determination that the physical resource is authentic.
7. A non-transitory computer-readable storage medium, comprising a plurality of instructions, that when executed by processing circuitry, enable the processing circuitry to:
retrieve a sled manifest stored in a secure memory of a sled, the sled manifest to include hardware authentication information for multiple physical resources of the sled, the hardware authentication information to include a public key to verify each physical resource of the sled;
generate a nonce,
communicate the nonce to a physical resource of the sled,
receive a signed version of the nonce from the physical resource, the signed version of the nonce signed with a private key of the physical resource, and
determine whether the physical resource is authentic based in part on the signed version of the nonce and the public key of the physical resource included with the hardware authentication information from the sled manifest.
8. The non-transitory computer-readable storage medium of claim 7 , the plurality of instructions, when executed, enable the processing circuitry to permit the physical resources to process a workload in response to a determination that the physical resource is authentic.
9. The non-transitory computer-readable storage medium of claim 7 , the plurality of instructions, when executed, enable the processing circuitry to prevent the physical resources from processing a workload in response to a determination that the physical resource is not authentic.
10. The non-transitory computer-readable storage medium of claim 7 , the plurality of instructions, when executed, enable the processing circuitry to determine whether the physical resource is authentic based in part on the signed version of the nonce and the public key, the public key obtained from an original manufacturer of the physical resource.
11. The non-transitory computer-readable storage medium of claim 7 , the plurality of instructions, when executed, enable the processing circuitry to add an indication of the physical resources in a database in response to a determination that the physical resource is authentic.
12. The non-transitory computer-readable storage medium of claim 7 , the plurality of instructions, when executed, enable the processing circuitry to generate a composed node comprising the physical resources of the sled in response to a determination that the physical resource is authentic.
13. An apparatus comprising:
a physical resource of a sled;
circuitry; and
memory comprising instructions that when executed by the circuitry cause the circuitry to:
receive a nonce from a pod management controller,
sign the nonce with a private key of a keypair,
send the signed nonce to the pod management controller, the pod management controller to determine whether the physical resource is authentic based in part on the signed nonce and a public key of the keypair included with hardware authentication information from a sled manifest associated with the sled, the sled manifest stored in a secure memory of the sled.
14. The apparatus of claim 13 , the memory comprising instructions that when executed by the circuitry cause the circuitry to receive an indication to process, via the physical resource, a workload in response to a determination, by the pod management controller, that the physical resource is authentic.
15. The apparatus of claim 13 , wherein the public key of the keypair is available from an original manufacturer of the physical resource.
16. A non-transitory computer-readable storage medium, comprising a plurality of instructions, that when executed by circuitry of a physical resource of a sled, enable the circuitry to:
receive a nonce from a pod management controller;
sign the nonce with a private key of a keypair;
send the signed nonce to the pod management controller, the pod management controller to determine whether the physical resource is authentic based in part on the signed nonce and a public key of the keypair included with hardware authentication information from a sled manifest associated with the sled, the sled manifest stored in a secure memory of the sled.
17. The non-transitory computer-readable storage medium of claim 16 , the plurality of instructions, when executed, enable the circuitry to receive an indication to process, via the physical resource, a workload in response to a determination, by the pod management controller, that the physical resource is authentic.
18. The non-transitory computer-readable storage medium of claim 16 , wherein the public key of the keypair is available from an original manufacturer of the physical resource.