System and method to isolate host and system management in an information handling system

1. An information handling system comprising:

a central processing unit to execute an operating system of the information handling system;

a memory to store a boot image for a boot process of the information handling system; and

a service processor to execute the boot image to perform the boot process, and the execution of the boot image to cause the service processor to:

detect whether an isolation profile is enabled within the boot process, wherein the isolation profile is enabled in response to a signal provided by a host device external to the information handling system based on the operating system being compromised; and

in response to the isolation profile being enabled, to disable Intelligent Platform Management Interface system management from the operating system to prevent system management access by the compromised operating system to the service processor.

2. The information handling system of claim 1 , the service processor further disable a management engine interface from the compromised operating system of the information handling system in response to detecting the isolation profile is enabled.

3. The information handling system of claim 2 wherein disabling the Intelligent Platform Management Interface system management and the management engine interface prevents system management drivers from being loaded in the compromised operating system.

4. The information handling system of claim 1 , the service processor further to receive infrastructure management updates for the information handing system via an out-of-band communication.

5. The information handling system of claim 4 wherein the infrastructure management updates include configuration updates, health requests for the information handling system.

6. The information handling system of claim 1 , the central processing unit to perform operating system level updates via in-band access through the operating system.

7. The information handling system of claim 6 wherein the operating system level updates include operating system patches, and operating system driver updates.

8. A method comprising:

starting a boot process of an information handling system;

detecting whether an isolation profile is enabled within the boot process, wherein the isolation profile is enabled in response to a signal provided by a host device external to the information handling system based on an operating system of the information handling system being compromised; and

in response to detecting the isolation profile is enabled, disabling Intelligent Platform Management Interface system management from the compromised operating system of the information handling system to prevent system management access by the compromised operating system to a service processor of the information handling system.

9. The method of claim 8 further comprising:

in response to detecting the isolation profile is enabled, disabling a management engine interface from the compromised operating system of the information handling system.

10. The method of claim 9 wherein disabling the Intelligent Platform Management Interface system management and the management engine interface prevents system management drivers from being loaded in the compromised operating system.

11. The method of claim 8 further comprising:

receiving infrastructure management updates for the information handing system via an out-of-band communication with the service processor.

12. The method of claim 11 wherein the infrastructure management updates include configuration updates, health requests for the information handling system.

13. The method of claim 8 further comprising:

performing operating system level updates via in-band access through the operating system.

14. The method of claim 13 wherein the operating system level updates include operating system patches, and operating system driver updates.

15. A method comprising:

receiving, at a service processor, an isolation profile for an information handling system via an out-of-band communication from a host device external to the information handling system;

storing, by the service processor, the isolation profile as a basic input/output system setting within a memory of the information handling system;

starting a boot process from the basic input/output system of the information handling system;

detecting whether the isolation profile is enabled within the boot process, wherein the isolation profile is enabled in response to a signal provided by the host device based on an operating system of the information handling system being compromised; and

in response to detecting the isolation profile is enabled, disabling Intelligent Platform Management Interface system management from the compromised operating system of the information handling system to prevent system management access by the compromised operating system to a service processor of the information handling system.

16. The method of claim 15 further comprising:

in response to detecting the isolation profile is enabled, disabling a management engine interface from the compromised operating system of the information handling system.

17. The method of claim 16 wherein disabling the Intelligent Platform Management Interface system management and the management engine interface prevents system management drivers from being loaded in the compromised operating system.

18. The method of claim 15 further comprising:

receiving infrastructure management updates for the information handing system via the out-of-band communication.

19. The method of claim 15 further comprising:

performing operating system level updates via in-band access through the operating system.

20. The method of claim 19 wherein the operating system level updates include operating system patches, and operating system driver updates.