Policy-based resource management with target-driven remediation on server
View Patent ↗A resource management solution for use in a data-processing infrastructure comprising a server data-processing entity and a set of target data-processing entities that is operable for downloading a set of management policies, executing a verification action indicated in each one of the corresponding management policies for verifying a compliance of the target data-processing entity with the management policy, executing a target-side remediation action indicated in each violated one of the corresponding target-side management policies which the target data-processing entity is not compliant with, for remedying the non-compliance of the target data-processing entity with the violated target-side management policy, sending an indication of a remediation request for each violated server-side management policies, which each target data-processing entity is not compliant with, and executing a corresponding server-side remediation action in response to each remediation request for remedying the non-compliance of the corresponding target data-processing entity with the corresponding violated server-side management policy.
1. A data-processing system comprising a microprocessor coupled to a memory having program code stored therein that is operable to perform, when the program code is executed on the data-processing system, the steps of:
downloading, from a server data-processing entity onto each target data-processing entity of a set of target data-processing entities, a set of corresponding management policies, the management policies of at least one of the target data-processing entities comprising a subset of server-side management policies and a subset of target-side management policies;
executing, under the control of each target data-processing entity, a verification action indicated in each one of the corresponding management policies for verifying a compliance of the target data-processing entity with the management policy;
executing, under the control of each target data-processing entity, a target-side remediation action indicated in each violated one of the corresponding target-side management policies which the target data-processing entity is not compliant with, for remedying the non-compliance of the target data-processing entity with the violated target-side management policy;
sending, from each target data-processing entity to the server data-processing entity, an indication of a remediation request for each violated one of the corresponding server-side management policies which the target data-processing entity is not compliant with;
executing, by the server data-processing entity, a corresponding server-side remediation action in response to each remediation request for remotely remedying, by the server data-processing entity, the non-compliance of the corresponding target data-processing entity with the corresponding violated server-side management policy; and
sending an enforcement report, comprising an indication of a result of the verification of the compliance with the corresponding management policies, from each target data-processing entity to the server data-processing entity, wherein the step of sending the indication of a remediation request comprises:
adding an indication of the remediation request to the enforcement report;
collecting environmental information on the target data-processing entity for the violated server-side management policy; and
associating the environmental information with the remediation request, wherein the step of executing the corresponding server-side remediation action comprises executing the server-side remediation action according to the associated environmental information.
2. The data-processing system according to 1 , wherein the step of sending the indication of the remediation request comprises:
adding the environmental information to the enforcement report in association with the remediation request.