System and method for control of baseboard management controller ports
An information handling system includes a Baseboard Management Controller (BMC) and a communication interface coupled to the BMC. The BMC includes a security co-processor that stores an access key. The access is associated with a first function of the BMC. The communication interface receives a security key from a device external to the information handling system. The BMC directs the security co-processor to determine if the first security key matches the first access key, and unlocks the first function when the first security key matches the first access key.
1. An information handling system, comprising:
a processor; and
a voltage regulator configured to provide power to the processor in response to a signal from a Baseboard Management Controller (BMC);
the BMC including a security co-processor that stores a first access key, the access key being associated with a first function of the BMC, wherein the first function includes the signal; and
a first communication interface coupled to the BMC and configured to receive a first security key from a device external to the information handling system;
the BMC configured to:
direct the security co-processor to determine if the first security key matches the first access key; and
unlock the first function when the first security key matches the first access key.
2. The information handling system of claim 1 :
the security co-processor to store a second access key associated with a second function of the BMC;
the first interface further to receive a second security key form the device;
the BMC further configured to:
direct the security co-processor to determine if the second security key matches the second access key; and
unlock the second function when the second security key matches the second access key.
3. The information handling system of claim 2 , wherein the first function comprises enabling communication via a second communication interface, the second communication interface for communicating internally within the information handling system.
4. The information handling system of claim 3 , wherein the second function comprises providing power to a processor of the information handling system.
5. The information handling system of claim 1 , wherein the first communication interface comprises a wireless communication device configured to receive the first security key from a mobile device.
6. The information handling system of claim 1 , wherein the first communication interface comprises a Universal Serial Bus (USB) interface and the external device comprises a USB device.
7. The information handling system of claim 1 , wherein the BMC is further configured to:
delete the first access key from the security co-processor after determining that the first security key matches the first access key.
8. The information handling system of claim 1 , wherein the security co-processor comprises a Trusted Platform Module.
9. A method, comprising:
storing, in a security co-processor of a Baseboard Management Controller (BMC) of an information handling system, a first access key, the access key being associated with a first function of the BMC;
receiving, by a first communication interface coupled to the BMC, a first security key from a device external to the information handling system;
directing, by the BMC, the security co-processor to determine if the first security key matches the first access key; and
unlocking the first function when the first security key matches the first access key, wherein unlocking the first function includes providing a signal to a voltage regulator to provide power to a processor of the information handling system.
10. The method of claim 9 :
storing, in the security co-processor, a second access key associated with a second function of the BMC;
receiving, by the first interface, a second security key form the device;
directing, by the BMC, the security co-processor to determine if the second security key matches the second access key; and
unlocking the second function when the second security key matches the second access key.
11. The method of claim 10 , wherein in unlocking the first function, the method further comprises:
enabling communication via a second communication interface, the second communication interface for communicating internally within the information handling system.
12. The method of claim 11 , wherein in unlocking the second function, the method further comprises;
providing power to a processor of the information handling system.
13. The method of claim 9 , wherein the first communication interface comprises a wireless communication device configured to receive the first security key from a mobile device.
14. The method of claim 9 , wherein the first communication interface comprises a Universal Serial Bus (USB) interface and the external device comprises a USB device.
15. The method of claim 9 , further comprising:
deleting the first access key from the security co-processor after determining that the first security key matches the first access key.
16. The method of claim 9 , wherein the security co-processor comprises a Trusted Platform Module.
17. An information handling system, comprising:
a Baseboard Management Controller (BMC);
a voltage regulator to provide power to the BMC; and
a wireless communication device including a security co-processor that stores a first access key, the access key being associated with a first function of the BMC, the wireless communication device configured to:
receive a first security key from a device external to the information handling system;
direct the security co-processor to determine if the first security key matches the first access key; and
direct the voltage regulator to provide power to the BMC when the first security key matches the first access key.
18. The information handling system of claim 17 , wherein the security co-processor comprises a Trusted Platform Module.