Configuration method and device of access control function, equipment and storage medium

Abstract

The embodiment of the invention provides an access control function configuration method and device, equipment and a storage medium. The method is applied to a substrate management controller. The baseboard management controller is deployed in the server; the server is further provided with a basic input and output system, an operating system and a processor, and the method comprises the steps that when the server is started, configuration information set in the basic input and output system is obtained; determining whether to start an access control function in the operating system according to the configuration information; if it is determined that the access control function in the operating system is not started, an interrupt signal is sent to the processor; the interrupt signal is used for indicating the processor not to start an access control function in the operating system. Therefore, according to the configuration information in the basic input and output system, the access control function in the operating system is not started, the performance of the GPU is prevented from being influenced, and meanwhile, the situation that the service is influenced due to low performance of the GPU is also avoided.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a method for configuring an access control function, a device for configuring an access control function, an electronic device and a computer-readable storage medium. Background Art

[0002] AMD (Advanced Micro Devices) processors are produced by AMD. Currently, AMD's customers and business partners are spread across many industries in China and are widely used. However, due to the design limitations of AMD processors on the AMD platform, when the IOMMU (input-output memory management unit) is turned off, the system may have offline problems. Therefore, the AMD platform will explicitly require that the IOMMU be turned on by default. When the IOMMU is turned on, the GPU (Graphics Processing Unit) performance of many AMD platform models that need to turn off the access control function will be affected, resulting in low GPU performance and serious impact on business. Summary of the invention

[0003] In view of the above problems, embodiments of the present invention are proposed to provide a method for configuring an access control function, a device for configuring an access control function, an electronic device and a computer-readable storage medium that overcome the above problems or at least partially solve the above problems.

[0004] In order to solve the above problems, in a first aspect, an embodiment of the present invention discloses a method for configuring an access control function, the method being applied to a baseboard management controller; the baseboard management controller being deployed in a server; the server also being deployed with a basic input / output system, an operating system, and a processor, the method comprising:

[0005] When the server is powered on, obtaining configuration information set in the basic input and output system;

[0006] Determining whether to enable an access control function in the operating system according to the configuration information;

[0007] If it is determined not to enable the access control function in the operating system, an interrupt signal is sent to the processor; the interrupt signal is used to instruct the processor not to enable the access control function in the operating system.

[0008] Optionally, the configuration information includes a configuration value corresponding to the access control function; and determining whether to enable the access control function in the operating system according to the configuration information includes:

[0009] Determining whether the configuration value corresponding to the access control function is a first target value;

[0010] If the configuration value corresponding to the access control function is the first target value, it is determined not to enable the access control function in the operating system.

[0011] Optionally, before obtaining the configuration information set in the basic input / output system, the method further includes:

[0012] Starting a preset timer in the baseboard management controller;

[0013] After sending the interrupt signal to the processor, the method further comprises:

[0014] Determining whether the access control function in the operating system is not started is completed;

[0015] If the access control function in the operating system is not started and completed, turning off the preset timer;

[0016] If the access control function in the operating system is not started and completed, an interrupt signal is sent to the processor again after a preset time, so that the processor does not start the access control service function in the operating system again, and the number of times the interrupt signal is sent to the processor is determined;

[0017] Determining whether the number of times the interrupt signal is sent is greater than a preset number;

[0018] If the number of times the interrupt signal is sent is greater than a preset number, the preset timer is turned off; the turning off of the preset timer indicates that the startup of the basic input and output system has ended, and the control of the server is transferred to the operating system.

[0019] Optionally, the memory of the baseboard management controller stores configuration items; if the access control function in the operating system is not started, the method further includes:

[0020] The default value of the configuration item in the memory of the baseboard management controller is modified to a second target value; the second target value is used to indicate that the access control function in the operating system is not started and has been completed.

[0021] Optionally, the configuration value corresponding to the access control function in the configuration information is determined by the basic input / output system according to the device information of the server.

[0022] In a second aspect, an embodiment of the present invention discloses a method for configuring an access control function, the method being applied to a basic input / output system; the basic input / output system being deployed in a server; the server also being deployed with a baseboard management controller, an operating system, and a processor, the method comprising:

[0023] Acquire device information of the server, and determine whether to disable an access control function in the operating system according to the device information of the server;

[0024] If it is determined that the server does not start the access control function in the operating system, the configuration value corresponding to the access control function in the configuration information is modified, and the modified configuration information is synchronized to the baseboard management controller, so that the baseboard management controller determines whether to start the access control function in the operating system according to the configuration information; if it is determined that the access control function in the operating system is not started, an interrupt signal is sent to the processor; the interrupt signal is used to instruct the processor not to start the access control function in the operating system.

[0025] Optionally, the device information includes: a model of the server and identification information of an external device of the server; and obtaining the device information of the server and determining whether to disable an access control function in the operating system according to the device information of the server includes:

[0026] Obtaining the model of the server, and determining whether the model of the server is a target model;

[0027] If the server is a target model, obtaining identification information of an external device of the server;

[0028] According to the preset whitelist and the identification information, it is determined whether the server does not start the access control function in the operating system.

[0029] Optionally, the identification information includes: manufacturer information and device information; and judging whether the server does not start the access control function in the operating system according to the preset whitelist and the identification information includes:

[0030] Determine whether the manufacturer information and the device information match the preset whitelist;

[0031] If the manufacturer information and the device information match the preset whitelist, it is determined that the server does not start the access control function in the operating system.

[0032] In a third aspect, an embodiment of the present invention discloses a device for configuring an access control function, the device being applied to a baseboard management controller; the baseboard management controller being deployed in a server; the server also being deployed with a basic input and output system, an operating system, and a processor, the device comprising:

[0033] An acquisition module, used for acquiring configuration information set in the basic input and output system when the server is turned on;

[0034] A first determination module, used to determine whether to enable an access control function in the operating system according to the configuration information;

[0035] The first sending module is used to send an interrupt signal to the processor if it is determined that the access control function in the operating system is not enabled; the interrupt signal is used to instruct the processor not to enable the access control function in the operating system.

[0036] Optionally, the configuration information includes a configuration value corresponding to the access control function; and the first determining module includes:

[0037] A first judgment submodule, used to judge whether the configuration value corresponding to the access control function is a first target value;

[0038] The determination submodule is used to determine whether to enable the access control function in the operating system if the configuration value corresponding to the access control function is the first target value.

[0039] Optionally, the first determining module further includes:

[0040] A starter module, used to start a preset timer in the baseboard management controller;

[0041] The device also includes:

[0042] A first judgment module is used to judge whether the access control function in the operating system is not started;

[0043] A first closing module, configured to close the preset timer if the access control function in the operating system is not started and completed;

[0044] A second sending module is used to send an interrupt signal to the processor again after a preset time if the access control function in the operating system is not started and completed, so that the processor does not start the access control service function in the operating system again, and determine the number of times the interrupt signal is sent to the processor;

[0045] A second judging module, used to judge whether the number of times the interrupt signal is sent is greater than a preset number;

[0046] The second shutdown module is used to close the preset timer if the number of times the interrupt signal is sent is greater than the preset number; closing the preset timer indicates that the startup of the basic input and output system has ended, and the control of the server is transferred to the operating system.

[0047] Optionally, the memory of the baseboard management controller stores configuration items; the device further includes:

[0048] The first modification module is used to modify the default value of the configuration item in the memory of the baseboard management controller to a second target value; the second target value is used to indicate that the access control function in the operating system is not started and has been completed.

[0049] Optionally, the configuration value corresponding to the access control function in the configuration information is determined by the basic input / output system according to the device information of the server.

[0050] In a fourth aspect, an embodiment of the present invention discloses a device for configuring an access control function, the device being applied to a basic input / output system; the basic input / output system being deployed in a server; the server being further deployed with a baseboard management controller, an operating system, and a processor, the device comprising:

[0051] A second determination module is used to obtain device information of the server and determine whether to disable the access control function in the operating system according to the device information of the server;

[0052] The second modification module is used to modify the configuration value corresponding to the access control function in the configuration information if it is determined that the server does not start the access control function in the operating system, and synchronize the modified configuration information to the baseboard management controller, so that the baseboard management controller determines whether to start the access control function in the operating system according to the configuration information; if it is determined that the access control function in the operating system is not to be started, an interrupt signal is sent to the processor; the interrupt signal is used to instruct the processor not to start the access control function in the operating system.

[0053] Optionally, the device information includes: a model of the server and identification information of an external device of the server; and the second determining module includes:

[0054] The second judgment submodule is used to obtain the model of the server and judge whether the model of the server is a target model;

[0055] An acquisition submodule, used for acquiring identification information of an external device of the server if the server is a target model;

[0056] The third judgment submodule is used to judge whether the server does not start the access control function in the operating system according to the preset white list and the identification information.

[0057] Optionally, the identification information includes: manufacturer information and device information; the third judgment submodule includes:

[0058] A judging unit, used to judge whether the manufacturer information and the device information match the preset whitelist;

[0059] A determining unit is used to determine that the server does not start the access control function in the operating system if the manufacturer information and the device information match the preset whitelist.

[0060] In a fifth aspect, the present invention shows an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the method for configuring the access control function described above when executing the computer program.

[0061] In a sixth aspect, the present invention illustrates a computer-readable storage medium, on which a computer program is stored, and the computer program, when executed by a processor, implements the steps of the method for configuring the access control function described above.

[0062] The embodiments of the present invention include the following advantages:

[0063] In an embodiment of the present invention, when the server is turned on, the baseboard management controller can first obtain the configuration information set in the basic input and output system, and then determine whether to enable the access control function in the operating system based on the configuration information. If it is determined not to enable the access control function in the operating system, an interrupt signal is sent to the processor, wherein the interrupt signal is used to instruct the processor not to enable the access control function in the operating system, thereby not enabling the access control function in the operating system based on the configuration information in the basic input and output system, thereby avoiding the performance of the GPU being affected, and also avoiding the impact on the business due to low GPU performance. BRIEF DESCRIPTION OF THE DRAWINGS

[0064] Figure 1 is a flowchart of a method for configuring an access control function provided by an embodiment of the present invention;

[0065] Figure 2 This is a flowchart of a step of not enabling the access control function provided by an embodiment of the present invention;

[0066] Figure 3 It is a flow chart of data processing steps of a baseboard management controller provided by an embodiment of the present invention;

[0067] Figure 4 is a flowchart of another method for configuring an access control function provided by an embodiment of the present invention;

[0068] Figure 5 It is a flow chart of parameter configuration steps of a basic input and output system provided by an embodiment of the present invention;

[0069] Figure 6 It is a structural block diagram of a configuration device for access control function provided by an embodiment of the present invention;

[0070] Figure 7 is a structural block diagram of another access control function configuration device provided by an embodiment of the present invention;

[0071] Figure 8 is a structural block diagram of an electronic device provided by an embodiment of the present invention;

[0072] Fig. 9 It is a structural block diagram of a computer-readable storage medium provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0073] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0074] In the related art, the AMD platform will explicitly require that IOMMU be enabled by default. When IOMMU is enabled, the GPU performance of many AMD platform models that need to disable the access control function will be affected, resulting in low GPU performance and serious impact on business. In order to solve the above technical problems, the present invention provides a method for configuring an access control function. When the server is turned on, the baseboard management controller can first obtain the configuration information set in the basic input and output system, and then determine whether to enable the access control function in the operating system based on the configuration information. If it is determined that the access control function in the operating system is not enabled, an interrupt signal is sent to the processor, wherein the interrupt signal is used to instruct the processor not to enable the access control function in the operating system, so that the access control function in the operating system can be disabled based on the configuration information in the basic input and output system, thereby avoiding the performance of the GPU being affected, and also avoiding the impact on business due to low GPU performance.

[0075] Reference Figure 1 , shows a flowchart of a method for configuring an access control function provided by an embodiment of the present invention, the method is applied to a baseboard management controller; the baseboard management controller is deployed in a server; the server is also deployed with a basic input and output system, an operating system and a processor, and the method may specifically include the following steps:

[0076] Step 101: when the server is turned on, obtain configuration information set in the basic input and output system.

[0077] In an embodiment of the present invention, a baseboard management controller (BMC), a base input / output system (BIOS), an operating system (OS), and a processor (CPU) may be deployed in the server. When the server is turned on, the baseboard management controller may obtain configuration information set in the base input / output system.

[0078] It should be noted that the access control function in the present invention may refer to an ACS (Access Control Service) function.

[0079] Step 102: Determine whether to enable the access control function in the operating system according to the configuration information.

[0080] In the embodiment of the present invention, after the baseboard management control obtains the configuration information set in the basic input and output system, it can determine whether to enable the access control function in the operating system according to the configuration information.

[0081] In one embodiment, the configuration information may include a configuration value corresponding to an access control function; determining whether to enable the access control function in the operating system based on the configuration information may include: judging whether the configuration value corresponding to the access control function is a first target value; if the configuration value corresponding to the access control function is the first target value, determining not to enable the access control function in the operating system.

[0082] For example, if the configuration value corresponding to the access control function is 0 and the first target value is 0, then it can be determined that the access control function and the first target value are 0, and the baseboard management controller can determine not to enable the access control function in the operating system. Thus, the baseboard controller can quickly determine whether to disable the access function in the operating system by inputting and outputting the configuration information in the system.

[0083] It should be noted that, in the present invention, the configuration value corresponding to the access control function in the configuration information is determined by the basic input / output system according to the device information of the server. The steps for determining the configuration value corresponding to the access control function in the configuration information will be described in detail in the subsequent embodiments of the present invention.

[0084] Step 103: If it is determined not to enable the access control function in the operating system, an interrupt signal is sent to the processor; the interrupt signal is used to instruct the processor not to enable the access control function in the operating system.

[0085] In an embodiment of the present invention, if the baseboard management controller determines not to enable the access control function in the operating system, the baseboard management controller may send an interrupt signal to the processor, wherein the interrupt signal is used to instruct the processor not to enable the access control function in the operating system.

[0086] like Figure 2 As shown, a flowchart of the steps of not turning on the access control function provided by an embodiment of the present invention is shown. After determining not to turn on the access control function in the operating system, the baseboard management controller can send an interrupt signal to the basic input and output system, and the basic input and output system then sends the interrupt signal to the processor. After receiving the interrupt signal, the processor suspends the current task, saves the state of the current task, and starts the preset program to turn off all operable access control functions in the operating system. After the access operation control function in the operating system is not turned on, the information that the access operation control function in the operating system is not turned on is sent to the baseboard management controller through a preset command, wherein the preset command can be an ipmi command. After the access operation control function in the operating system is not turned on, the processor restores the saved current task state.

[0087] In one embodiment, before obtaining the configuration information set in the basic input and output system, it also includes: starting a preset timer in the baseboard management controller; after sending an interrupt signal to the processor, it also includes: determining whether the non-startup of the access control function in the operating system is completed; if the non-startup of the access control function in the operating system is completed, then turning off the preset timer; if the non-startup of the access control function in the operating system is not completed, then sending an interrupt signal to the processor again after a preset time, so that the processor will not start the access control service function in the operating system again, and determining the number of times the interrupt signal is sent to the processor; determining whether the number of times the interrupt signal is sent is greater than the preset number; if the number of times the interrupt signal is sent is greater than the preset number, then turning off the preset timer; turning off the preset timer indicates that the startup of the basic input and output system has ended, and the control of the server is transferred to the operating system.

[0088] Specifically, in the present invention, the baseboard management controller may be provided with a preset timer, which is used to monitor the log information of the baseboard management controller, and is also used to indicate that the startup of the basic input and output system has ended, and the control of the server is transferred to the operating system. When the server is turned on, the baseboard management controller can start the preset timer. After sending an interrupt signal to the processor, the baseboard management controller can receive the information that the access operation control function in the operating system has been completed, and judge whether the access control function in the operating system is not started. If it is completed, the preset timer can be turned off. If it is not completed, the interrupt signal can be sent to the processor again after 3 minutes, so that the processor will not start the access control function in the operating system again. If the processor tries to not start the access control function in the operating system for 3 times, the preset timer can be turned off. Thus, the setting of the timer ensures that the processor can not start the access control function in the operating system for many times, which improves the success rate of not starting the access control function in the operating system.

[0089] In an embodiment of the present invention, configuration items are stored in the memory of the baseboard management controller; if the access control function in the operating system is not started, it also includes: modifying the default value of the configuration item in the memory of the baseboard management controller to a second target value; the second target value is used to indicate that the access control function in the operating system is not started.

[0090] Specifically, a configuration item is stored in the memory of the baseboard management controller, and the configuration item may be acsFlag, and the default value of acsFlag may be 0. After the baseboard management controller determines that the access control function in the operating system is not started, the default value of acsFlag may be modified to 1, wherein the modified acsFlag value of 1 indicates that the access control function in the operating system is not started. Thus, the user can know that the access control function in the operating system is not started through the configuration item value in the baseboard controller.

[0091] In order to better illustrate the embodiments of the present invention, Figure 3 The data processing in the baseboard management controller is described in detail, such as Figure 3As shown, a flow chart of the steps of data processing of a baseboard management controller provided by an embodiment of the present invention is shown. The shared memory in the baseboard management controller sets acsFlag. When the server is turned on, the baseboard management controller starts a preset timer for monitoring the log of the baseboard management controller, obtains the configuration value corresponding to the access control function in the basic input and output system, and determines whether the configuration value is 0. If the configuration value is not 0, the baseboard management controller turns off the preset timer. If the configuration value is 0, the baseboard management controller writes to a specific I / O port to trigger an SMI (System Management Interrupt) interrupt. The SMI interrupt is used to notify the processor not to enable the access control function in the operating system. After the baseboard management controller receives the completed information, it determines whether the access control function in the operating system is not enabled. If not, it tries to disable the access control function in the operating system three times. After the access control function in the operating system is not enabled, or after trying to disable the access control function in the operating system three times, acsFlag is set to 1, and then the baseboard management controller turns off the preset timer.

[0092] In an embodiment of the present invention, when the baseboard management control determines that the configuration value is 0, it can enter a waiting state, and then enter whether to enter the operating system. If the operating system is entered, the baseboard management control writes a specific I / O port to trigger an SMI interrupt. The present invention avoids too fast or too early SMI interrupts by determining that the SMI interrupt is triggered after entering the operating system, thereby ensuring the success rate of not enabling the access control function in the operating system.

[0093] In an embodiment of the present invention, when the server is turned on, the baseboard management controller obtains the configuration information set in the basic input and output system; according to the configuration information, it is determined whether to enable the access control function in the operating system; if it is determined not to enable the access control function in the operating system, an interrupt signal is sent to the processor; the interrupt signal is used to instruct the processor not to enable the access control function in the operating system. Therefore, according to the configuration information in the basic input and output system, the access control function in the operating system can be disabled, which avoids the performance of the GPU being affected, and also avoids the business being affected by the low performance of the GPU.

[0094] like Figure 4 FIG. 1 is a flowchart showing another method for configuring an access control function provided by an embodiment of the present invention. The method is applied to a basic input / output system; the basic input / output system is deployed in a server; the server is also deployed with a baseboard management controller, an operating system, and a processor. The method may specifically include the following steps:

[0095] Step 401, obtaining device information of the server, and determining whether to disable the access control function in the operating system according to the device information of the server.

[0096] In the embodiment of the present invention, the basic input / output system can obtain the device information of the server, and then determine whether to disable the access control function in the operating system according to the device information.

[0097] In one embodiment, the device information may include: the model of the server and the identification information of the server's external device; obtaining the device information of the server, and determining whether to not start the access control function in the operating system based on the device information of the server, may include: obtaining the model of the server, and determining whether the model of the server is a target model; if the server is a target model, obtaining the identification information of the server's external device; and determining whether the server does not start the access control function in the operating system based on a preset whitelist and the identification information.

[0098] The present invention first determines whether it is the target model through the model of the server. The target model in the present invention can be a model with a switch. When the server is the target model, it will be determined whether to disable the access control function in the operating system, thereby effectively configuring the access control function for the device of the target model.

[0099] In one embodiment, the identification information may include: manufacturer information and device information; judging whether the server does not start the access control function in the operating system according to the preset white list and the identification information may include: judging whether the manufacturer information and the device information match the preset white list; if the manufacturer information and the device information match the preset white list, determining that the server does not start the access control function in the operating system. Thus, whether the access control function in the operating system is not started can be accurately determined through the manufacturer information and the device information.

[0100] Step 402: If it is determined that the server does not start the access control function in the operating system, the configuration value corresponding to the access control function in the configuration information is modified, and the modified configuration information is synchronized to the baseboard management controller, so that the baseboard management controller determines whether to start the access control function in the operating system according to the configuration information; if it is determined not to start the access control function in the operating system, an interrupt signal is sent to the processor; the interrupt signal is used to instruct the processor not to start the access control function in the operating system.

[0101] In the embodiment of the present invention, after the basic input and output system determines that the server does not start the access control function in the operating system, the configuration value corresponding to the access control function in the configuration information can be modified, and then the modified configuration information can be synchronized to the baseboard management controller.

[0102] Specifically, after the server is turned on, a new Miscellaneous Configuration->Enable / Disable ACS option is added under the Advanced interface of the basic input / output system. The Disable ACS option is whether to enable the access control function in the operating system. The configuration value of the Enable / Disable ACS option may include 0 and 1, wherein 0 corresponds to Disable and 1 corresponds to Enable. Generally, the Enable / Disable ACS option defaults to Disable. In the present invention, a new DXE (Driver Execution Environment) module may be added. The DXE module is used to determine the configuration value of the Enable / Disable ACS option. First, the device information of the server is used to determine whether the server is the target model. If it is not the target model, the configuration information of the basic input / output system may be synchronized to the baseboard management control module through the redfish interface. If it is the target model, the manufacturer information and device information of all external devices are polled. The external device in the present invention may be a PCIE (Peripheral Component Interconnect Express) device, compares the manufacturer information and device information of the external device with the preset whitelist, wherein the preset whitelist stores the manufacturer information and device information of all GPU devices that need to disable the access control function in the operating system. If the manufacturer information and device information of the external device do not match the preset whitelist, the configuration information of the basic input and output system is synchronized to the baseboard management control module through the redfish interface. If the manufacturer information and device information of the external device match the preset whitelist, the configuration value of the Enable / Disable ACS option stored in the non-volatile random access memory is obtained through the getVariable function, and the configuration value of the Enable / Disable ACS option is assigned to 0, that is, the Enable / Disable ACS option is changed to Disable, and then the Enable / Disable ACS is written into the non-volatile random access memory through the setVariable function for storage, to ensure that the option information stored in the basic input and output system is updated synchronously, and finally the configuration information of the basic input and output system is synchronized to the baseboard management control module through the redfish interface. Figure 5 As shown, a flowchart of the steps of a parameter configuration process of a basic input-output system provided by an embodiment of the present invention is shown.

[0103] In an embodiment of the present invention, the device information of the server is obtained, and based on the device information of the server, it is determined whether to not start the access control function in the operating system; if it is determined that the server does not start the access control function in the operating system, the configuration value corresponding to the access control function in the configuration information is modified, and the modified configuration information is synchronized to the baseboard management controller, so that the baseboard management controller determines whether to start the access control function in the operating system based on the configuration information, and if it is determined that the access control function in the operating system is not started, an interrupt signal is sent to the processor; the interrupt signal is used to instruct the processor not to start the access control function in the operating system. Therefore, the access control function in the operating system can be not started according to the configuration information in the basic input and output system, which avoids the performance of the GPU being affected, and also avoids the business being affected by the low performance of the GPU.

[0104] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0105] Reference Figure 6 , shows a structural block diagram of a device for configuring an access control function provided by an embodiment of the present invention, the device is applied to a basic input-output system; the basic input-output system is deployed in a server; the server is also deployed with a baseboard management controller, an operating system and a processor, and the device may specifically include the following modules:

[0106] An acquisition module 601 is used to acquire configuration information set in the basic input and output system when the server is turned on;

[0107] A first determination module 602, configured to determine whether to enable an access control function in the operating system according to the configuration information;

[0108] The first sending module 603 is used to send an interrupt signal to the processor if it is determined that the access control function in the operating system is not enabled; the interrupt signal is used to instruct the processor not to enable the access control function in the operating system.

[0109] In one embodiment, the configuration information includes a configuration value corresponding to the access control function; the first determining module 602 includes:

[0110] A first judgment submodule, used to judge whether the configuration value corresponding to the access control function is a first target value;

[0111] The determination submodule is used to determine whether to enable the access control function in the operating system if the configuration value corresponding to the access control function is the first target value.

[0112] In one embodiment, the first determining module 602 further includes:

[0113] A starter module, used to start a preset timer in the baseboard management controller;

[0114] The device also includes:

[0115] A first judgment module is used to judge whether the access control function in the operating system is not started;

[0116] A first closing module, configured to close the preset timer if the access control function in the operating system is not started and completed;

[0117] A second sending module is used to send an interrupt signal to the processor again after a preset time if the access control function in the operating system is not started and completed, so that the processor does not start the access control service function in the operating system again, and determine the number of times the interrupt signal is sent to the processor;

[0118] A second judging module, used to judge whether the number of times the interrupt signal is sent is greater than a preset number;

[0119] The second shutdown module is used to close the preset timer if the number of times the interrupt signal is sent is greater than the preset number; closing the preset timer indicates that the startup of the basic input and output system has ended, and the control of the server is transferred to the operating system.

[0120] In one embodiment, the memory of the baseboard management controller stores configuration items; the device further includes:

[0121] The first modification module is used to modify the default value of the configuration item in the memory of the baseboard management controller to a second target value; the second target value is used to indicate that the access control function in the operating system is not started and has been completed.

[0122] In one embodiment, the configuration value corresponding to the access control function in the configuration information is determined by the basic input / output system according to the device information of the server.

[0123] In the embodiment of the present invention, the acquisition module is used to acquire the configuration information set in the basic input and output system when the server is turned on; the first determination module is used to determine whether to enable the access control function in the operating system according to the configuration information; the first sending module is used to send an interrupt signal to the processor if it is determined that the access control function in the operating system is not enabled; the interrupt signal is used to instruct the processor not to enable the access control function in the operating system. Therefore, the access control function in the operating system can be disabled according to the configuration information in the basic input and output system, thereby avoiding the performance of the GPU being affected, and also avoiding the business being affected by the low performance of the GPU.

[0124] Reference Figure 7 , shows a structural block diagram of another access control function configuration device provided by an embodiment of the present invention, the device is applied to a basic input-output system; the basic input-output system is deployed in a server; the server is also deployed with a baseboard management controller, an operating system and a processor, and the device may specifically include the following modules:

[0125] The second determination module 701 is used to obtain the device information of the server and determine whether to disable the access control function in the operating system according to the device information of the server;

[0126] The second modification module 702 is used to modify the configuration value corresponding to the access control function in the configuration information if it is determined that the server does not start the access control function in the operating system, and synchronize the modified configuration information to the baseboard management controller, so that the baseboard management controller determines whether to start the access control function in the operating system according to the configuration information, and if it is determined not to start the access control function in the operating system, an interrupt signal is sent to the processor; the interrupt signal is used to instruct the processor not to start the access control function in the operating system.

[0127] In one embodiment, the device information includes: the model of the server and identification information of the external device of the server; the second determination module 701 includes:

[0128] The second judgment submodule is used to obtain the model of the server and judge whether the model of the server is a target model;

[0129] An acquisition submodule, used for acquiring identification information of an external device of the server if the server is a target model;

[0130] The third judgment submodule is used to judge whether the server does not start the access control function in the operating system according to the preset white list and the identification information.

[0131] In one embodiment, the identification information includes: manufacturer information and device information; the third judgment submodule includes:

[0132] A judging unit, used to judge whether the manufacturer information and the device information match the preset whitelist;

[0133] A determining unit is used to determine that the server does not start the access control function in the operating system if the manufacturer information and the device information match the preset whitelist.

[0134] In an embodiment of the present invention, the second determination module is used to obtain the device information of the server, and determine whether to not start the access control function in the operating system based on the device information of the server; the second modification module is used to modify the configuration value corresponding to the access control function in the configuration information if it is determined that the server does not start the access control function in the operating system, and synchronize the modified configuration information to the baseboard management controller, so that the baseboard management controller determines whether to start the access control function in the operating system based on the configuration information, and if it is determined that the access control function in the operating system is not started, an interrupt signal is sent to the processor; the interrupt signal is used to instruct the processor not to start the access control function in the operating system. Therefore, the access control function in the operating system can be not started according to the configuration information in the basic input and output system, which avoids the performance of the GPU being affected, and also avoids the business being affected by the low performance of the GPU.

[0135] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0136] like Figure 8 , showing a structural block diagram of an electronic device provided in an embodiment of the present invention, including:

[0137] It includes a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, the various processes of the configuration method embodiment of the above-mentioned access control function are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0138] like Fig. 9 , showing that an embodiment of the present invention also provides a structural block diagram of a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the various processes of the configuration method embodiment of the above-mentioned access control function are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0139] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0140] It will be appreciated by those skilled in the art that the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0141] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0142] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0143] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0144] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0145] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0146] The above describes in detail a method for configuring an access control function, a device for configuring an access control function, an electronic device, and a computer-readable storage medium provided by the present invention. Specific examples are used herein to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A method for configuring an access control function, characterized in that: The method is applied to a baseboard management controller; The baseboard management controller is deployed in the server; The server is also equipped with a basic input and output system, an operating system and a processor, and the method includes: When the server is powered on, obtaining configuration information set in the basic input and output system; Determining whether to enable an access control function in the operating system according to the configuration information; If it is determined not to enable the access control function in the operating system, an interrupt signal is sent to the processor; the interrupt signal is used to instruct the processor not to enable the access control function in the operating system.

2. The method for configuring the access control function according to claim 1, characterized in that: The configuration information includes a configuration value corresponding to the access control function; and according to the configuration information, Determining whether to enable an access control function in the operating system includes: Determining whether the configuration value corresponding to the access control function is a first target value; If the configuration value corresponding to the access control function is the first target value, it is determined not to enable the access control function in the operating system.

3. The method for configuring the access control function according to claim 1, characterized in that: Before obtaining the configuration information set in the basic input and output system, the method further includes: Starting a preset timer in the baseboard management controller; After sending the interrupt signal to the processor, the method further comprises: Determining whether the access control function in the operating system is not started is completed; If the access control function in the operating system is not started and completed, turning off the preset timer; If the access control function in the operating system is not started and completed, an interrupt signal is sent to the processor again after a preset time, so that the processor does not start the access control service function in the operating system again, and the number of times the interrupt signal is sent to the processor is determined; Determining whether the number of times the interrupt signal is sent is greater than a preset number; If the number of times the interrupt signal is sent is greater than a preset number, the preset timer is turned off; the turning off of the preset timer indicates that the startup of the basic input and output system has ended, and the control of the server is transferred to the operating system.

4. The method for configuring the access control function according to claim 3, characterized in that: The memory of the baseboard management controller stores configuration items; if the access control function in the operating system is not started, the method further includes: The default value of the configuration item in the memory of the baseboard management controller is modified to a second target value; the second target value is used to indicate that the access control function in the operating system is not started and has been completed.

5. The method for configuring the access control function according to claim 2, characterized in that: The configuration value corresponding to the access control function in the configuration information is output by the basic input The system determines it according to the device information of the server.

6. A method for configuring an access control function, characterized in that: The method is applied to a basic input-output system; the basic input-output system is deployed in a server; The server is also equipped with a baseboard management controller, an operating system and a processor, and the method includes: Acquire device information of the server, and determine whether to disable an access control function in the operating system according to the device information of the server; If it is determined that the server does not start the access control function in the operating system, the configuration value corresponding to the access control function in the configuration information is modified, and the modified configuration information is synchronized to the baseboard management controller, so that the baseboard management controller determines whether to start the access control function in the operating system according to the configuration information; if it is determined that the access control function in the operating system is not started, an interrupt signal is sent to the processor; the interrupt signal is used to instruct the processor not to start the access control function in the operating system.

7. The method for configuring the access control function according to claim 6, characterized in that: The device information includes: the model of the server and identification information of an external device of the server; the acquiring the device information of the server and determining whether to not start the access control function in the operating system according to the device information of the server includes: Obtaining the model of the server, and determining whether the model of the server is a target model; If the server is a target model, obtaining identification information of an external device of the server; According to the preset whitelist and the identification information, it is determined whether the server does not start the access control function in the operating system.

8. The method for configuring the access control function according to claim 7, characterized in that: The identification information includes: manufacturer information and device information; according to the preset whitelist and the identification information, Determining whether the server does not start the access control function in the operating system includes: Determine whether the manufacturer information and the device information match the preset whitelist; If the manufacturer information and the device information match the preset whitelist, the service is determined The device does not activate the access control function in the operating system.

9. A device for configuring an access control function, characterized in that: The device is applied to a baseboard management controller; The baseboard management controller is deployed in the server; The server is also equipped with a basic input and output system, an operating system and a processor, and the device includes: An acquisition module, used for acquiring configuration information set in the basic input and output system when the server is turned on; A first determination module, used to determine whether to enable an access control function in the operating system according to the configuration information; The first sending module is used to send an interrupt signal to the processor if it is determined that the access control function in the operating system is not enabled; the interrupt signal is used to instruct the processor not to enable the access control function in the operating system.

10. A device for configuring an access control function, characterized in that: The device is applied to a basic input-output system; the basic input-output system is deployed in a server; The server is also equipped with a baseboard management controller, an operating system and a processor, and the device includes: A second determination module is used to obtain device information of the server and determine whether to disable the access control function in the operating system according to the device information of the server; The second modification module is used to modify the configuration value corresponding to the access control function in the configuration information if it is determined that the server does not start the access control function in the operating system, and synchronize the modified configuration information to the baseboard management controller, so that the baseboard management controller determines whether to start the access control function in the operating system according to the configuration information; if it is determined that the access control function in the operating system is not to be started, an interrupt signal is sent to the processor; the interrupt signal is used to instruct the processor not to start the access control function in the operating system.

11. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the steps of the method for configuring the access control function as described in any one of claims 1-5 or 6-8 are implemented.

12. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method for configuring the access control function as described in any one of claims 1-5 or 6-8 are implemented.

Images