Software raid/management trusted storage-device-based communication system
A software Redundant Array of Independent Disk (RAID)/management trusted storage-device-based communication system includes a chassis housing a software Redundant Array of Independent Disk (RAID) subsystem, a storage device that is coupled to the software RAID subsystem and that includes a storage device memory subsystem, and a management subsystem that is coupled to the storage device. The management subsystem authenticates the storage device to establish management subsystem/storage device trust between the management subsystem and the storage device and, in response, uses the storage device to establish management subsystem/software RAID subsystem trust between the management subsystem and the software RAID subsystem. In response to establishing the management subsystem/storage device trust and the management subsystem/software RAID subsystem trust, the management subsystem transmits communications with the software RAID subsystem via the storage device memory subsystem in the storage device.
1. A software Redundant Array of Independent Disk (RAID)/management trusted storage-device-based communication system, comprising:
a chassis;
a software Redundant Array of Independent Disk (RAID) subsystem that is housed in the chassis;
a storage device that is housed in the chassis, that is coupled to the software RAID subsystem, and that includes a storage device memory subsystem; and
a management subsystem that is housed in the chassis and that is coupled to the storage device, wherein the management subsystem is configured to:
authenticate the storage device to establish management subsystem/storage device trust between the management subsystem and the storage device;
use, in response to establishing the management subsystem/storage device trust, the storage device to establish management subsystem/software RAID subsystem trust between the management subsystem and the software RAID subsystem; and
transmit, in response to establishing the management subsystem/storage device trust and the management subsystem/software RAID subsystem trust, communications with the software RAID subsystem via the storage device memory subsystem in the storage device.
2. The system of claim 1 , wherein the using the storage device to establish the management subsystem/software RAID subsystem trust includes the management subsystem:
providing software RAID subsystem authentication requests for the software RAID subsystem in the storage device memory subsystem of the storage device, wherein the software RAID subsystem is configured to retrieve the software RAID subsystem authentication requests and provide software RAID subsystem authentication responses in the storage device memory subsystem of the storage device;
retrieving the software RAID subsystem authentication responses from the storage device memory subsystem of the storage device; and
authenticating, based on the software RAID subsystem authentication responses, the software RAID subsystem to establish the management subsystem/software RAID subsystem trust.
3. The system of claim 1 , wherein the using the storage device to establish the management subsystem/software RAID subsystem trust includes the management subsystem:
providing a software RAID subsystem authentication instruction to the storage device that is configured to cause the storage device to authenticate the software RAID subsystem; and
receiving, from the storage device, a software RAID subsystem authentication confirmation that confirms the authentication of the software RAID subsystem and establishes the management subsystem/software RAID subsystem trust.
4. The system of claim 1 , wherein the management subsystem/software RAID subsystem trust is established using Security Protocol and Data Model (SPDM) communications.
5. The system of claim 4 , wherein the management subsystem is configured to:
tunnel one or more of the SPDM communications in authentication commands transmitted to the software RAID subsystem via the storage device memory subsystem in the storage device.
6. The system of claim 1 , wherein the storage device is a Non-Volatile Memory express (NVMe) storage device, and the storage device memory subsystem is a Controller Memory Buffer (CMB) memory subsystem in the NVMe storage device.
7. The system of claim 1 , wherein the software RAID subsystem is configured to:
authenticate the storage device to establish software RAID subsystem/storage device trust between the software RAID subsystem and the storage device;
use, in response to establishing the software RAID subsystem/storage device trust, the storage device to establish software RAID subsystem/management subsystem trust between the software RAID subsystem and the management subsystem; and
transmit, in response to establishing the software RAID subsystem/storage device trust and the software RAID subsystem/management subsystem trust, the communications with the management subsystem via the storage device memory subsystem in the storage device.
8. An Information Handling System (IHS), comprising:
a processing system; and
a memory system that is coupled to the processing system and that includes instructions that, when executed by the processing system, cause the processing system to provide a management engine that is configured to:
authenticate a storage device that is coupled to the processing system to establish management engine/storage device trust between the processing system and the storage device;
use, in response to establishing the management engine/storage device trust, the storage device to establish management engine/software Redundant Array of Independent Disk (RAID) subsystem trust between the management engine and a software RAID subsystem that is coupled to the storage device; and
transmit, in response to establishing the management engine/storage device trust and the management engine/software RAID subsystem trust, communications with the software RAID subsystem via the storage device memory subsystem in the storage device.
9. The IHS of claim 8 , wherein the using the storage device to establish the management engine/software RAID subsystem trust includes the management engine:
providing software RAID subsystem authentication requests for the software RAID subsystem in the storage device memory subsystem of the storage device, wherein the software RAID subsystem authentication requests are configured to be retrieved by the software RAID subsystem and cause the software RAID subsystem to provide software RAID subsystem authentication responses in the storage device memory subsystem of the storage device;
retrieving the software RAID subsystem authentication responses from the storage device memory subsystem of the storage device; and
authenticating, based on the software RAID subsystem authentication responses, the software RAID subsystem to establish the management engine/software RAID subsystem trust.
10. The IHS of claim 8 , wherein the using the storage device to establish the management engine/software RAID subsystem trust includes the management engine:
providing a software RAID subsystem authentication instruction to the storage device that is configured to cause the storage device to authenticate the software RAID subsystem; and
receiving, from the storage device, a software RAID subsystem authentication confirmation that confirms the authentication of the software RAID subsystem and establishes the management engine/software RAID subsystem trust.
11. The IHS of claim 8 , wherein the management engine/software RAID subsystem trust is established using Security Protocol and Data Model (SPDM) communications.
12. The IHS of claim 11 , wherein the management engine is configured to:
tunnel one or more of the SPDM communications in authentication commands transmitted to the software RAID subsystem via the storage device memory subsystem in the storage device.
13. The IHS of claim 8 , wherein the storage device is a Non-Volatile Memory express (NVMe) storage device, and the storage device memory subsystem is a Controller Memory Buffer (CMB) memory subsystem in the NVMe storage device.
14. A method for providing trusted storage-device-based communications between a software Redundant Array of Independent Disk (RAID) subsystem and a management subsystem in a computing device, comprising:
authenticating, by a management subsystem, a storage device that is coupled to the management subsystem to establish management subsystem/storage device trust between the management subsystem and the storage device;
using, by the management subsystem in response to establishing the management subsystem/storage device trust, the storage device to establish management subsystem/software Redundant Array of Independent Disk (RAID) subsystem trust between the management subsystem and a software RAID subsystem that is coupled to the storage device; and
transmitting, by the management subsystem in response to establishing the management subsystem/storage device trust and the management subsystem/software RAID subsystem trust, communications with the software RAID subsystem via the storage device memory subsystem in the storage device.
15. The method of claim 14 , wherein the using the storage device to establish the management subsystem/software RAID subsystem trust includes:
providing, by the management subsystem, software RAID subsystem authentication requests for the software RAID subsystem in the storage device memory subsystem of the storage device;
retrieving, by the software RAID subsystem, the software RAID subsystem authentication requests;
providing, by the software RAID subsystem in response to retrieving the software RAID subsystem authentication requests, software RAID subsystem authentication responses in the storage device memory subsystem of the storage device;
retrieving, by the management subsystem, the software RAID subsystem authentication responses from the storage device memory subsystem of the storage device; and
authenticating, by the management subsystem based on the software RAID subsystem authentication responses, the software RAID subsystem to establish the management subsystem/software RAID subsystem trust.
16. The method of claim 14 , wherein the using the storage device to establish the management subsystem/software RAID subsystem trust includes:
providing, by the management subsystem, a software RAID subsystem authentication instruction to the storage device that is configured to cause the storage device to authenticate the software RAID subsystem; and
receiving, by the management subsystem from the storage device, a software RAID subsystem authentication confirmation that confirms the authentication of the software RAID subsystem and establishes the management subsystem/software RAID subsystem trust.
17. The method of claim 14 , wherein the management subsystem/software RAID subsystem trust is established using Security Protocol and Data Model (SPDM) communications.
18. The method of claim 17 , further comprising:
tunnelling, by the management subsystem, one or more of the SPDM communications in authentication commands transmitted to the software RAID subsystem via the storage device memory subsystem in the storage device.
19. The method of claim 14 , wherein the storage device is a Non-Volatile Memory express (NVMe) storage device, and the storage device memory subsystem is a Controller Memory Buffer (CMB) memory subsystem in the NVMe storage device.
20. The method of claim 14 , further comprising:
authenticating, by the software RAID subsystem, the storage device to establish software RAID subsystem/storage device trust between the software RAID subsystem and the storage device;
using, by the software RAID subsystem in response to establishing the software RAID subsystem/storage device trust, the storage device to establish software RAID subsystem/management subsystem trust between the software RAID subsystem and the management subsystem; and
transmitting, by the software RAID subsystem in response to establishing the software RAID subsystem/storage device trust and the software RAID subsystem/management subsystem trust, the communications with the management subsystem via the storage device memory subsystem in the storage device.