Server in-band management method, server and storage medium
Patent Information
- Application Number
- CN202611264880.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2026-08-19
- Publication Date
- 2026-11-03
AI Technical Summary
The existing in-band management architecture for servers poses serious security risks in cloud computing and multi-tenant environments, and existing solutions prevent the BMC from properly monitoring the operating system status and from preventing message flood attacks.
The system receives authentication information from the host through the first communication channel, verifies it, generates authorization credentials, switches the second communication channel to the connected state, and executes management commands only after successful verification, thus achieving physical separation between the authentication channel and the command channel.
It effectively prevents unauthorized users from performing in-band management operations, improves server security without affecting normal operation and maintenance functions, and resists message flood attacks.
Smart Images
Figure CN123035009A_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of server security technology, and in particular to a server in-band management method, a server, and a storage medium. Background Technology
[0002] In-band management is one of the core management methods in server operation and maintenance. It refers to the use of the Intelligent Platform Management Interface (IPMI) tool within the server operating system to transmit data via the Low Pin Count Bus (LPC) and send IPMI commands to the Baseboard Management Controller (BMC) through the Keyboard Controller Style Interface (KCS). This enables management operations such as powering on / off the server, configuring startup items, and configuring the BMC network. This method allows commands to be issued and processed directly by the BMC without requiring username and password verification, greatly simplifying the daily management tasks for maintenance personnel.
[0003] However, with the widespread adoption of cloud computing and multi-tenant environments, this default-trust in-band management architecture presents serious security vulnerabilities. Existing technologies propose blocking in-band management operations by ignoring all commands received from the KCS interface, but directly ignoring all commands in this way will prevent the BMC from properly monitoring the operating system status, resulting in a lack of operational and maintenance functions, and will also fail to prevent packet flood attacks, ultimately leading to system resource exhaustion, firmware crashes, or even system freezes.
[0004] In view of this, how to achieve more secure in-band management without affecting normal operation and maintenance functions has become a technical problem that urgently needs to be solved in the field of server security management. Summary of the Invention
[0005] In view of this, this application provides a server in-band management method, a server, and a storage medium that can achieve in-band security management without affecting normal operation and maintenance functions.
[0006] Firstly, this embodiment provides a server in-band management method applied to a management controller; the method includes:
[0007] Receive authentication information sent by the host through the first communication channel;
[0008] The authentication information is verified, and an authorization credential is generated after the verification is successful. The authorization credential is then returned to the host through the first communication channel.
[0009] Send a first control command to the channel control module to instruct the channel control module to switch the second communication channel from a disconnected state to an connected state;
[0010] The system receives management commands sent by the host through the second communication channel and executes the management commands after the management commands are verified.
[0011] Secondly, this embodiment provides an in-band management method applied to the host side; the method includes:
[0012] Authentication information is sent to the management controller via the first communication channel;
[0013] After the authentication information is verified, the authorization credential returned by the management controller is received through the first communication channel;
[0014] In response to the second communication channel being switched to the active state, management commands are sent to the management controller through the second communication channel.
[0015] Thirdly, this embodiment provides an in-band management method applied to a server, the server including a management controller and a host; the method includes:
[0016] The host sends authentication information to the management controller through the first communication channel;
[0017] The management controller receives the authentication information through the first communication channel, verifies the authentication information, and generates an authorization credential after the verification is successful.
[0018] The management controller returns the authorization credential to the host via the first communication channel;
[0019] The host receives the authorization credential through the first communication channel;
[0020] The management controller sends a first control command to the channel control module to switch the second communication channel from a disconnected state to an connected state;
[0021] The host terminal responds to the second communication channel being switched to the connected state and sends management commands to the management controller through the second communication channel;
[0022] The management controller receives the management instruction through the second communication channel and executes the management instruction after the management instruction is verified.
[0023] Fourthly, this embodiment provides a server, including: a management controller and a host terminal;
[0024] The management controller is used to execute the server in-band management method described in the first aspect;
[0025] The host is used to execute the server in-band management method described in the second aspect.
[0026] Fifthly, this embodiment provides a storage medium storing a computer program that, when executed by a processor, implements the server in-band management method described in the first to third aspects above.
[0027] Compared with related technologies, the server in-band management method, server, and storage medium provided in this embodiment, in the management controller, receive authentication information sent by the host through a first communication channel; verify the authentication information, and generate an authorization credential after successful verification, and return the authorization credential to the host through the first communication channel; send a first control command to the channel control module to instruct the channel control module to switch the second communication channel from a disconnected state to an connected state; receive management commands sent by the host through the second communication channel, and execute the management commands after successful verification. Through this embodiment, the authentication channel and command channel can be physically separated, so that the host can only issue management commands through the second communication channel when authorized, effectively preventing unauthorized users from performing in-band management operations on the server, thereby improving server security without affecting server operation and maintenance functions.
[0028] Details of one or more embodiments of this application are set forth in the following drawings and description to make other features, objects and advantages of this application more readily apparent. Attached Figure Description
[0029] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:
[0030] Figure 1 A flowchart of an embodiment of the server in-band management method provided in this application;
[0031] Figure 2 Application scenario diagram of the server in-band management method provided in this application;
[0032] Figure 3 A flowchart of Embodiment 2 of the server in-band management method provided in this application;
[0033] Figure 4 This is a flowchart of Embodiment 3 of the server in-band management method provided in this application. Detailed Implementation
[0034] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application.
[0035] The terminology used in this application is for the purpose of describing particular embodiments only and is not intended to be limiting of the application. The singular forms “a,” “the,” and “the” used herein are also intended to include the plural forms unless the context clearly indicates otherwise. It should also be understood that the term “and / or” as used herein refers to and includes any and all possible combinations of one or more of the associated listed items.
[0036] It should be understood that although the terms first, second, third, etc., may be used in this application to describe various information, such information should not be limited to these terms. These terms are only used to distinguish information of the same type from one another. For example, without departing from the scope of this application, first information may also be referred to as second information, and similarly, second information may also be referred to as first information. Depending on the context, the word "if" as used herein may be interpreted as "when," "when," or "in response to determination."
[0037] The following specific embodiments are given to illustrate the technical solution of this application in detail.
[0038] Figure 1 This is a flowchart illustrating an embodiment of the server in-band management method provided in this application. (Refer to...) Figure 1 The method provided in this embodiment may include:
[0039] Step S101: Receive authentication information sent by the host through the first communication channel.
[0040] Before introducing the method provided in this application, a brief overview of its application scenarios will be given. Specifically, Figure 2 This diagram illustrates an application scenario for the server in-band management method provided in this application. (Refer to...) Figure 2The method provided in this application is applied to a server comprising a management controller and a host. In one possible implementation, the server is a physical server, with its motherboard housing the management controller and the host. The management controller, or BMC (Baseboard Management Controller), is an independent embedded microcontroller with its own power supply, clock, and storage resources. Even if the host is powered off or the operating system crashes, the management controller can still function normally. The host includes a CPU (Central Processing Unit) and an operating system running on it. The CPU is the core of the server's computation, responsible for running user business programs and the operating system. The management controller and the host are connected via multiple physical buses, including a first communication channel and a second communication channel.
[0041] The following describes the in-band server management method applied to the management controller provided in this embodiment. Specifically, the management controller receives authentication information from the host through a first communication channel, which is a physical communication link independent of the second communication channel. Optionally, the first communication channel is a PCIe (Peripheral Component Interconnect Express) channel, and the second communication channel is a KCS channel. The high bandwidth of the PCIe channel ensures efficient transmission of authentication information and authorization credentials, while the KCS channel, as a standard in-band management channel defined by the IPMI specification, ensures compatibility with the existing server management ecosystem. The authentication information is used to verify the legitimate identity of the host user, specifically including but not limited to user passwords or digital certificates.
[0042] Optionally, as one possible implementation, the user starts an authentication tool (e.g., IPMI AUTH tool) on the host side, enters a password or imports a digital certificate through the tool, and the authentication tool sends the authentication information entered by the user to the management controller through a first communication channel.
[0043] Step S102: Verify the authentication information, and generate an authorization credential after successful verification. Then, return the authorization credential to the host through the first communication channel.
[0044] Specifically, the management controller pre-stores a database of authentication information for legitimate users. Upon receiving authentication information from the host, the management controller compares the received information with the stored legitimate authentication information. If a match is found, the requester is confirmed as a legitimate user. Subsequently, the credential generation module in the management controller generates a unique authorization token based on the successful authentication. This token can be a randomly generated string, possessing uniqueness and unpredictability. The management controller sends the generated authorization token back to the IPMI AUTH tool on the host via the first communication channel. Upon receiving the token, the host displays it in the user interface for subsequent user use.
[0045] Step S103: Send a first control command to the channel control module to instruct the channel control module to switch the second communication channel from the disconnected state to the connected state.
[0046] Specifically, upon successful authentication and generation of authorization credentials, the management controller sends a first control command to the channel control module. Upon receiving this first control command, the channel control module switches the second communication channel from its current disconnected state to an connected state.
[0047] Optionally, as one possible embodiment, refer to... Figure 2 The channel control module is a CPLD (Complex Programmable Logic Device). The channel control module directly controls the physical connection and disconnection of the second communication channel. When the channel control module sets the physical switch corresponding to the second communication channel to the off position, the second communication channel between the host and the management controller is cut off at the physical circuit level, and no signal can be transmitted through this channel. When the channel control module sets the physical switch to the on position, the second communication channel is connected at the physical circuit level, and signals can be transmitted normally through this channel.
[0048] The management controller connects to the channel control module via a dedicated bus and sends control commands to the channel control module. Optionally, the dedicated bus can be an I2C (Inter-Integrated Circuit) bus or a GPIO (General Purpose Input / Output) pin.
[0049] Step S104: Receive management instructions sent by the host through the second communication channel, and execute the management instructions after the management instructions are verified.
[0050] Specifically, after the second communication channel is switched to the active state, the host can send management commands to the management controller through the second communication channel. The management controller receives the management command through the second communication channel, verifies the authorization credentials carried in the management command, and executes the operation indicated by the management command after successful verification.
[0051] The management commands include, but are not limited to, server power on / off commands, startup item setting commands, BMC network configuration modification commands, and hardware status query commands. The management command data packet carries the issued authorization credential token. Upon receiving the management command, the management controller first extracts the authorization credential from the data packet and compares it with the locally stored authorization credential. If they match, the management command is confirmed to originate from a legitimate user, and the corresponding operation is executed; otherwise, the management command is discarded, and no operation is performed.
[0052] This embodiment achieves physical separation between the authentication and command channels by using a first communication channel for the interaction of authentication information and authorization credentials, and a second communication channel for the transmission of management commands. After successful authentication, the management controller instructs the channel control module to connect to the second communication channel. This ensures that the host can only issue management commands through the second communication channel with valid authorization. This hardware-level physical isolation effectively prevents unauthorized users from performing in-band management operations on the server, thereby improving server security without affecting server maintenance functions.
[0053] Optionally, as a possible embodiment, the step of executing the management command after the management command verification is passed may include:
[0054] The management command is parsed to extract the verification credential carried in the management command; the verification credential is compared with the authorization credential; if the verification credential matches the authorization credential, the management command is executed; if the verification credential does not match the authorization credential, the management command is discarded.
[0055] Specifically, when the host sends a management command to the management controller through the second communication channel, the data packet of the management command carries the authorization credential issued by the management controller.
[0056] The data packets of management instructions follow a predefined communication protocol format, which specifies the position and length of the credential fields. Upon receiving a management instruction, the management controller first parses the data packet and extracts the credential to be verified from the specified fields according to the protocol format.
[0057] The management controller maintains an authorization credential cache to store currently valid authorization credentials. When the management controller generates and issues a new authorization credential, the credential is stored in the cache; when an authorization credential expires and is marked as invalid, it is removed from the cache. Upon receiving a management command, the management controller searches the cache for the authorization credential corresponding to the current session and performs a string-by-string comparison between the credential to be verified and the found authorization credential.
[0058] If the comparison results are consistent, meaning the verification credential and the authorization credential are exactly the same, then the current management command is confirmed to originate from a legitimate user, and the management controller executes the operation indicated by the management command. For example, if the management command is a shutdown command, the management controller will shut down the server; if the management command is a startup item setting command, the management controller will modify the server's startup item configuration.
[0059] If the comparison result is inconsistent, that is, the certificate to be verified does not match the authorization certificate, then the source of the current management instruction is confirmed to be illegal, the management controller discards the management instruction and does not perform any operation.
[0060] Optionally, while discarding the management command, the management controller can also record the verification failure event and generate a security log for subsequent auditing and tracing by operations and maintenance personnel.
[0061] The verification mechanism in this embodiment ensures that only management commands carrying correct authorization credentials can be executed by the management controller. Even if an attacker gains access to the second communication channel through some means, the management controller will still refuse to execute the management commands they issue because they cannot obtain the correct authorization credentials, thus providing dual security protection.
[0062] Optionally, as a possible embodiment, the above method further includes:
[0063] When generating the authorization certificate, a preset validity period is set for the authorization certificate; after the authorization certificate reaches the preset validity period, a second control command is sent to the channel control module to instruct the channel control module to switch the second communication channel from the connected state back to the disconnected state.
[0064] Specifically, when generating an authorization credential, the management controller's credential generation module simultaneously assigns a validity period to that credential. This validity period can be set by the system default (e.g., 10 minutes) or customized by the user based on actual security needs. The management controller stores the authorization credential locally and records its generation timestamp and corresponding validity period.
[0065] The management controller initiates a timeout detection task, which polls and checks the validity status of all currently issued authorization credentials at a preset period (e.g., every 1 minute). For each authorization credential, the management controller calculates the difference between the current time and the timestamp of the authorization credential's generation. If the difference has reached or exceeded the preset validity period, the authorization credential is determined to have expired.
[0066] When the management controller detects that the authorization credential has expired, it marks the credential as invalid locally. Subsequent management commands carrying this credential will be rejected. Furthermore, it sends a second control command to the channel control module, which contains an opcode instructing the channel control module to switch the second communication channel back to the disconnected state. Upon receiving the second control command, the channel control module switches the physical switch corresponding to the second communication channel from the ON position back to the OFF position, thus re-disconnecting the second communication channel at the physical circuit level.
[0067] This embodiment implements a time-window-based proactive circuit breaker mechanism. Even if the host obtains access to the second communication channel after successful authentication, this access is time-limited. After the authorization credential expires, the second communication channel automatically returns to a physically disconnected state. If the host needs to issue management commands again, it must re-initiate the authentication process. This further narrows the time window for security attacks and effectively reduces the security risks caused by the leakage or theft of authorization credentials.
[0068] Optionally, as a possible embodiment, the above method further includes:
[0069] When the server is running, the second communication channel is disconnected by default.
[0070] Specifically, when the server powers on, the channel control module (such as a CPLD) executes default initialization logic, setting the physical switch corresponding to the second communication channel to the off position by default. At this time, the host cannot send any management commands to the management controller through the second communication channel.
[0071] The default disconnect logic of the channel control module is implemented through hardware circuitry and does not rely on the management controller or host software control. Even if the management controller has not completed initialization or malfunctions, the channel control module will still set the second communication channel to the disconnected state by default after power-on. After the management controller completes initialization and authenticates the authentication information on the host, it sends a first control command to the channel control module, instructing it to switch the second communication channel to the connected state.
[0072] This embodiment establishes a fundamental security baseline of "physical isolation without authorization" by physically disconnecting the second communication channel by default during server startup. Compared to existing solutions that rely on software to ignore KCS instructions, this embodiment cuts off the communication link at the physical circuit level. Unauthorized attackers cannot launch attacks on the management controller by sending any data packets to the second communication channel, fundamentally eliminating the possibility of unauthorized access. Simultaneously, because the channel is physically disconnected, the management controller does not need to consume CPU resources to process any invalid messages from the second communication channel, effectively resisting high-concurrency message flood attacks.
[0073] Figure 3 A flowchart illustrating a second embodiment of the server in-band management method provided in this application. (Refer to...) Figure 3 This method is applied to the host side and includes:
[0074] Step S301: Send authentication information to the management controller through the first communication channel.
[0075] Specifically, the user launches an authentication tool (e.g., the IPMI AUTH tool) on the host side, which provides a user interface. The user enters a password or imports a digital certificate in the authentication tool's interface. After receiving the authentication information entered by the user, the authentication tool sends the authentication information to the management controller through a first communication channel (such as a PCIe channel). Optionally, the authentication information can be transmitted in an encrypted manner to prevent theft or tampering.
[0076] Step S302: After the authentication information is verified, the authorization credential returned by the management controller is received through the first communication channel.
[0077] Specifically, after receiving the authorization credential, the authentication tool displays it in the user interface for the user to use when issuing management commands. Optionally, the authorization credential can be displayed in various formats, such as plain text or a QR code, to facilitate user access and use.
[0078] In step S303, in response to the second communication channel being switched to the on state, a management command is sent to the management controller through the second communication channel.
[0079] Specifically, after obtaining authorization credentials from the authentication tool, the user launches the command delivery tool (e.g., the IPMI Tool). The user enters the authorization credentials and the management commands to be executed (e.g., shutdown command, restart command, etc.) into the command delivery tool. The command delivery tool generates a management command data packet carrying the authorization credentials and sends this data packet to the management controller via a second communication channel (e.g., the KCS channel).
[0080] Since the authorization credential is only issued after the management controller has authenticated it, and the management controller sends the first control command to the channel control module to connect the second communication channel at the same time as the authentication is successful, the host can determine that the second communication channel has been switched to the connected state after receiving the authorization credential.
[0081] This embodiment provides the execution flow of the in-band management method on the host side. Authentication is completed and authorization credentials are obtained through the first communication channel. After the second communication channel is connected, management instructions carrying authorization credentials are issued through the second communication channel. This achieves physical separation between the authentication channel and the instruction channel, so that the host can only issue management instructions through the second communication channel when it has legal authorization. Physical isolation is achieved at the hardware layer, which effectively prevents unauthorized users from performing in-band management operations on the server, thereby improving the security of the server without affecting the server's operation and maintenance functions.
[0082] Optionally, as one possible embodiment, the step of sending management instructions to the management controller via the second communication channel may include:
[0083] Obtain the authorization credential and generate a management instruction carrying the authorization credential; send the management instruction to the management controller through the second communication channel.
[0084] Specifically, the user enters the authorization credentials obtained from the authentication tool into the command issuance tool, and then enters the management command to be executed. The command issuance tool constructs a management command data packet according to a predefined communication protocol format, fills in the authorization credentials in the specified fields of the data packet, and fills in the operation code and parameters of the management command in the other fields of the data packet.
[0085] The command issuing tool invokes the IPMI driver in the operating system to send management command data packets to the management controller via the LPC bus and KCS interface. Upon receiving the data packet, the management controller extracts the authorization credentials, verifies them, and executes the corresponding management operation if the verification is successful.
[0086] This embodiment embeds the authorization credential into the management instruction data packet, enabling the management controller to verify the legitimacy of the instruction source while receiving the management instruction, without the need for an additional verification interaction process, thus ensuring both security and communication efficiency.
[0087] Figure 4 This is a flowchart of Embodiment 3 of the server in-band management method provided in this application. (Refer to...) Figure 4 This embodiment describes the interaction process between the management controller and the host from the perspective of the overall server system. The method includes:
[0088] In step S401, the host sends authentication information to the management controller through the first communication channel.
[0089] Specifically, the user on the host side enters authentication information (such as a password or digital certificate) through an authentication tool (e.g., the IPMI AUTH tool), and the authentication tool sends the authentication information to the management controller through the first communication channel (such as the PCIe channel).
[0090] In step S402, the management controller receives authentication information through the first communication channel, verifies the authentication information, and generates an authorization credential after the verification is successful.
[0091] Specifically, the management controller receives authentication information through the first communication channel and compares it with locally pre-stored valid authentication information. Upon successful verification, the management controller generates a unique authorization token.
[0092] In step S403, the management controller returns the authorization credential to the host through the first communication channel.
[0093] Specifically, the management controller returns the authorization credential token to the authentication tool on the host side through the first communication channel.
[0094] In step S404, the host receives the authorization credential through the first communication channel.
[0095] Specifically, the host receives the authorization credentials returned by the management controller through the first communication channel and displays them in the user interface for subsequent use by the user.
[0096] In step S405, the management controller sends a first control command to the channel control module to switch the second communication channel from the disconnected state to the connected state.
[0097] Specifically, after generating the authorization credential, the management controller sends a first control command to the channel control module. Based on this first control command, the channel control module (such as a CPLD) switches the second communication channel (such as a KCS channel) from a physically disconnected state to a physically connected state.
[0098] Optionally, as one possible implementation, when the server starts up, the channel control module defaults to setting the second communication channel to a physically disconnected state. Therefore, the second communication channel remains disconnected until the management controller sends the first control command. After receiving the first control command, the channel control module switches the physical switch corresponding to the second communication channel from the disconnected position to the connected position, thus connecting the second communication channel between the host and the management controller at the physical circuit level.
[0099] In step S406, the host responds to the second communication channel being switched to the connected state and sends management instructions to the management controller through the second communication channel.
[0100] Specifically, after receiving the authorization credentials, the host determines that the second communication channel has been switched to an active state. The user inputs management commands and authorization credentials through a command delivery tool (e.g., the IPMI Tool). The command delivery tool generates a management command data packet carrying the authorization credentials and sends it to the management controller through the second communication channel.
[0101] In step S407, the management controller receives management instructions through the second communication channel and executes the management instructions after the management instructions are verified.
[0102] Specifically, the management controller receives management commands through the second communication channel, extracts the authorization credentials from the management command data packet, and compares and verifies them with the locally stored authorization credentials. After successful verification, the management controller executes the operation indicated by the management command (such as server power on / off, startup item settings, etc.).
[0103] The specific implementation principles and processes of steps S401 to S407 can be found in the descriptions in the previous embodiments, and will not be repeated here.
[0104] This embodiment describes the execution flow of the in-band management method from the perspective of the overall server system, covering the interaction process between the host and the management controller: through the separation of the authentication channel (first communication channel) and the command channel (second communication channel), and the mechanism of connecting the second communication channel after successful authentication, this embodiment realizes the security control of the server's in-band management, effectively preventing unauthorized users from launching unauthorized operations on the management controller through the second communication channel.
[0105] It should be noted that the steps shown in the above process or in the flowchart of the accompanying figures can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases the steps shown or described may be executed in a different order than that shown here.
[0106] Corresponding to the aforementioned embodiment of an in-band server management method, this application also provides an embodiment of a management controller, the management controller comprising:
[0107] The first communication interface is used to communicate with the host through the first communication channel;
[0108] The second communication interface is used to communicate with the host through the second communication channel;
[0109] Channel control interface, used for communication with the channel control module;
[0110] The processing module is connected to the first communication interface, the second communication interface, and the channel control interface;
[0111] The processing module is used to receive authentication information sent by the host through the first communication interface; verify the authentication information and generate an authorization credential after the verification is successful, and return the authorization credential to the host through the first communication interface; send a first control command to the channel control module through the channel control interface to instruct the channel control module to switch the second communication channel from the disconnected state to the connected state; receive management commands sent by the host through the second communication interface, and execute the management commands after the management commands are verified.
[0112] Optionally, as one possible embodiment, the above-described processing module is further configured to:
[0113] When generating the authorization certificate, set a preset validity period for the authorization certificate;
[0114] After the authorization certificate reaches the preset validity period, a second control command is sent to the channel control module through the channel control interface to instruct the channel control module to switch the second communication channel from the connected state back to the disconnected state.
[0115] Optionally, as one possible embodiment, the above-described processing module is further configured to:
[0116] Parse the management instructions and extract the verification credentials carried in the management instructions;
[0117] Compare the voucher to be verified with the authorization voucher;
[0118] If the credential to be verified matches the authorization credential, then execute the management instruction;
[0119] If the verification document does not match the authorization document, the management instruction is discarded.
[0120] Optionally, as one possible embodiment, the first communication interface is a PCIe interface, the second communication interface is a KCS interface, and the channel control interface is an I2C interface or a GPIO interface.
[0121] Corresponding to the aforementioned embodiment of the server in-band management method, this application also provides a host-side embodiment, the host-side comprising:
[0122] The first communication interface is used to communicate with the management controller through the first communication channel;
[0123] The second communication interface is used to communicate with the management controller through the second communication channel;
[0124] The processing module is connected to the first communication interface and the second communication interface;
[0125] The processing module is used to: send authentication information to the management controller through the first communication interface; receive the authorization credential returned by the management controller through the first communication interface after the authentication information is verified; and send management instructions to the management controller through the second communication interface in response to the second communication channel being switched to the connected state.
[0126] This application also provides a server, which includes a management controller and a host, wherein the processors in the management controller and the host respectively execute the server in-band management method applied to the management controller and the server in-band management method applied to the host provided in the above embodiments.
[0127] This application also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the methods in any of the embodiments provided in this application.
[0128] It should be understood that the specific embodiments described herein are merely illustrative of the application and not intended to limit it. All other embodiments derived by those skilled in the art based on the embodiments provided in this application without inventive effort are within the scope of protection of this application.
[0129] Obviously, the accompanying drawings are merely some examples or embodiments of this application. Those skilled in the art can apply this application to other similar situations based on these drawings without any creative effort. Furthermore, it is understood that although the work done in this development process may be complex and lengthy, for those skilled in the art, certain design, manufacturing, or production modifications made based on the technical content disclosed in this application are merely conventional technical means and should not be considered as insufficient disclosure of this application.
[0130] The term "embodiment" in this application refers to a specific feature, structure, or characteristic described in connection with an embodiment that may be included in at least one embodiment of this application. The appearance of this phrase in various places throughout the specification does not necessarily imply the same embodiment, nor does it imply that it is mutually exclusive with or alternative to other embodiments. It will be clearly or implicitly understood by those skilled in the art that the embodiments described in this application may be combined with other embodiments without conflict.
[0131] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of patent protection. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the appended claims.
Claims
1. A server in-band management method, characterized in that, Applied to a management controller; the method includes: Receive authentication information sent by the host through the first communication channel; The authentication information is verified, and an authorization credential is generated after the verification is successful. The authorization credential is then returned to the host through the first communication channel. Send a first control command to the channel control module to instruct the channel control module to switch the second communication channel from a disconnected state to an connected state; The system receives management commands sent by the host through the second communication channel and executes the management commands after the management commands are verified.
2. The server in-band management method according to claim 1, characterized in that, The method further includes: When generating the authorization certificate, a preset validity period is set for the authorization certificate; After the authorization credential reaches the preset validity period, a second control command is sent to the channel control module to instruct the channel control module to switch the second communication channel from the connected state back to the disconnected state.
3. The server in-band management method according to claim 1, characterized in that, The step of executing the management instruction after the management instruction verification is passed includes: The management instruction is parsed to extract the verification credential carried in the management instruction; The credential to be verified is compared with the authorization credential; If the credential to be verified matches the authorization credential, then the management instruction is executed; If the credential to be verified does not match the authorization credential, the management instruction is discarded.
4. The server in-band management method according to claim 1, characterized in that, The method further includes: When the server is running, the second communication channel is in the disconnected state by default.
5. The server in-band management method according to claim 1, characterized in that, The first communication channel is a PCIe channel, and the second communication channel is a KCS channel.
6. A server in-band management method, characterized in that, Applied to the host side; the method includes: Authentication information is sent to the management controller via the first communication channel; After the authentication information is verified, the authorization credential returned by the management controller is received through the first communication channel; In response to the second communication channel being switched to the active state, management commands are sent to the management controller through the second communication channel.
7. The server in-band management method according to claim 6, characterized in that, Sending management commands to the management controller via the second communication channel includes: Obtain the authorization credential and generate the management instruction carrying the authorization credential; The management command is sent to the management controller through the second communication channel.
8. A server in-band management method, characterized in that, Applied to a server, the server including a management controller and a host; the method includes: The host sends authentication information to the management controller through the first communication channel; The management controller receives the authentication information through the first communication channel, verifies the authentication information, and generates an authorization credential after the verification is successful. The management controller returns the authorization credential to the host via the first communication channel; The host receives the authorization credential through the first communication channel; The management controller sends a first control command to the channel control module to switch the second communication channel from a disconnected state to an connected state; The host terminal responds to the second communication channel being switched to the connected state and sends management commands to the management controller through the second communication channel; The management controller receives the management instruction through the second communication channel and executes the management instruction after the management instruction is verified.
9. A server, characterized in that, include: Management controller and host; The management controller is used to execute the server in-band management method according to any one of claims 1 to 5; The host is used to execute the server in-band management method according to any one of claims 6 to 7.
10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the steps of the server in-band management method according to any one of claims 1 to 8.