IPMI Command Transport Through Redfish for Secure Server Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing server components that have not yet implemented the Redfish API continue to use IPMI for management, lacking sufficient communication security mechanisms, necessitating a way to leverage Redfish's security benefits.
Innovation Solution
Implementing a mechanism to package and encode IPMI commands into HTTP requests using Redfish, enabling management controllers to process these commands and generate HTTP responses, allowing IPMI commands to be conveyed via Redfish, and supporting IPMI command serialization for out-of-order execution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IPMI is used for server management on components that have not implemented Redfish API, then device compatibility and ease of operation are maintained, but communication security is insufficient
Solution Approach 1:
The patent introduces an intermediary layer that translates between IPMI and Redfish protocols. This mediator enables legacy IPMI components to communicate through the secure Redfish framework without requiring modification of the underlying IPMI implementation, thus resolving the contradiction between maintaining compatibility and achieving security.
Solution Approach 2:
The system implements a universal management interface that can handle both IPMI and Redfish protocols. By making the management controller multi-functional, it can accept secure Redfish commands while still supporting legacy IPMI operations, thereby achieving both security and compatibility simultaneously.
2Reliability
If Redfish API is implemented for secure management, then communication security is improved, but device complexity and development effort increase
Solution Approach 1:
The patent segments the security implementation into separate translation and protocol handling layers. This allows the core IPMI functionality to remain unchanged while adding Redfish security capabilities as a distinct modular component, reducing overall implementation complexity.
Solution Approach 2:
By introducing a Redfish-to-IPMI translation intermediary, the patent isolates the complexity of Redfish implementation from the core management functions. This mediator handles all security-related operations, allowing existing IPMI components to remain simple while achieving Redfish-level security.
3Reliability
If IPMI commands are translated to Redfish, then security is enhanced, but command processing time and system overhead increase
Solution Approach 1:
The patent implements preliminary action by pre-establishing translation rules and authentication mappings between IPMI and Redfish protocols. This allows commands to be translated and authenticated more efficiently during execution, reducing the time penalty associated with protocol conversion.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An information handling system may include at least one processor; and a non-transitory memory coupled to the at least one processor. The information handling system may be configured to: receive a command associated with an Intelligent Platform Management Interface (IPMI) protocol; package the command for transmission according to a Redfish protocol; and transmit the packaged command to a Redfish interface of a management controller, wherein the management controller is configured to unpackage and execute the command.