Server configuration and management

• US 20050198235A1
• Filed: 01/29/2004
• Published: 09/08/2005
• Est. Priority Date: 01/29/2004
• Status: Abandoned Application

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Neuhengen, Don, Kumar, Arvind
• Application Number:
  US10/768,570
• Publication Number:
  US 20050198235A1
• Time in Patent Office: Days
• US Class Current: 709/222
• CPC Class Codes: H04L 12/00 Data switching networks interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units G06F13/00
• CPC Class Codes: H04L 41/04 Network management architectures or arrangements
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213

Abstract

Server configuration and management methods, servers and management modules equipped to practice the methods are described herein.

Claims

1. In a member server of a community of servers, a method of operation, comprising:

transmitting after power on of the member server, prior to operating system installation on the member server, a discovery message onto a management interconnect of the community;

receiving via the management interconnect, a response from a management module of the community;

transmitting via the management interconnect, a request for configuration data to the management module;

receiving via the management interconnect, configuration data from the management module; and

configuring the member server in accordance with the received configuration data.

2. The method of claim 1, wherein the method further comprises receiving via the management interconnect, a request for identification data of the member server from the management module;

and

transmitting via the management interconnect, the requested identification data to the management module.

3. In a management module of a community of servers, a method of operation comprising:

receiving via a management interconnect of the community, a discovery message from a member server;

transmitting via the management interconnect, a response to the discovery message to the member server;

receiving via the management interconnect, a request for configuration data from the member server; and

transmitting via the management interconnect, configuration data to the member server.

4. The method of claim 3, wherein the method further comprises obtaining the configuration data from a remote management server via a network connection connecting the management module to the remote management server.

5. The method of claim 3, wherein the method further comprises

transmitting via the management interconnect, a request for identification and deployment data of the member server to the member server;

receiving via the management interconnect, the requested identification and deployment data of the member server from the member server; and

generating the configuration data based at least in part on the received identification and deployment data of the member server.

6. The method of claim 5, wherein said generating comprises obtaining non-deployment specific configuration data based at least in part on the received identification data, and particularizing the non-deployment specific configuration data based at least in part on the received deployment data.

7. A server, suitable for use as a member server of a community of servers, comprising:

an interconnect interface to couple the server to a management interconnect of the community;

a server management controller coupled to the interconnect interface to transmit after power on, prior to operating system installation, a discovery message onto the management interconnect through the interconnect interface;

receive from the management interconnect, through the interconnect interface, a response from a management module of the community;

transmit through the interconnect interface and the management interconnect, a request for configuration data to the management module;

receive through the management interconnect and the interconnect interface, configuration data from the management module; and

configure the server in accordance with the received configuration data.

8. The server of claim 7, wherein the server management controller is further designed to

receive through management interconnect and the interconnect interface, a request for identification data of the server from the management module;

and

transmit through the interconnect interface and the management interconnect, the requested identification data to the management module.

9. A community management module for a community of member servers, comprising:

a first interconnect interface to couple the management module to a management interconnect of the community; and

a community management controller coupled to the first interconnect interface to

receive through the management interconnect and the first interconnect interface, a discovery message from a member server of a community of servers;

transmit through the first interconnect interface and the management interconnect, a response to the discovery message to the member server;

receive through the management interconnect and the first interconnect interface, a request for configuration data from the member server; and

transmit through the first interconnect interface and the management interconnect, configuration data to the member server.

10. The community management module of claim 9, wherein the community management module further comprises a second interconnect interface, and the community management controller is further coupled to the second interconnect interface and equipped to obtain the configuration data from a remote management server through the second interface.

11. The community management module of claim 9, wherein the community management controller is further equipped to

transmit through the interconnect interface and the management interconnect, a request for identification and deployment data of the member server to the member server;

receive through the management interconnect and the interconnect interface, the requested identification and deployment data of the member server from the member server; and

generate the configuration data based at least in part on the received identification and deployment data.

12. The community management module of claim 11, wherein the community management module further comprises a second interconnect interface, and the community management controller is further coupled to the second interconnect interface and equipped to

obtain non-deployment specific configuration data based at least in part on the received identification data, and

particularize the non-deployment specific configuration data based at least in part on the received deployment data.

13. A system comprising:

a management module;

a management interconnect coupled to the management module; and

a first server coupled to the management interconnect, equipped to transmit after power on of the first server, prior to operating system installation on the server, a discovery message onto the management interconnect;

receive via the management interconnect, a response from the management module;

transmit via the management interconnect, a request for configuration data to the management module;

receive via the management interconnect, configuration data from the management module; and

configure the first server in accordance with the received configuration data.

14. The system of claim 13, wherein the first server is further designed to

receive via the management interconnect, a request for identification data of the first server;

and

transmit via the management interconnect, the requested identification data to the management module.

15. The system of claim 13, wherein the system further comprises a second server similarly equipped with the enumerated capabilities of the first server, and coupled to the management interconnect.

16. The system of claim 15, wherein the system further comprises a chassis, and the management module, the management interconnect, and the first and second servers are disposed within the chassis.

17. In a management server, a method of operation, comprising:

establishing a secure link to a management module of a community of servers;

transmitting via the secure link the management server'"'"'s credential for accessing a member server of the community of servers; and

receiving from the management module through the secure link, a secret for use to access the member server.

18. The method of claim 17, further comprising

initiating a management session with the member server;

receiving one or more challenges from the member server;

answering the challenges employing the secret; and

managing the member server.

19. In a community management module of a community of servers, a method of operation, comprising:

receiving from a remote management server over a secure link, a request to access a member server of the community of servers;

authenticating the remote management server;

generating a secret; and

transmitting the secret via the secure link to the management server, and via a management interconnect of the community, to the member server.

20. The method of claim 19, wherein said generating a secret comprises generating a random number.

21. In a member server of a community of servers, a method of operation, comprising:

receiving a secret from a management module of the community via a management interconnect of the community;

receiving initiation of management session from a management server;

issuing challenges to the management server;

receiving responses to the challenges from the management server; and

validating the responses employing the secret.

22. The method of claim 21, wherein the method further comprises accepting management by the management server.

23. A management server comprising:

a networking interface;

memory having stored therein instructions designed to establish a secure link to a management module of a community of servers,

transmit via the secure link the management server'"'"'s credential for accessing a member server of the community of servers, and

receive from the management module through the secured link, a secret for use to access the member server; and

at least one processor coupled to the memory to execute the instructions.

24. The management server of claim 23, wherein the instructions are further designed to initiate a management session with the member server;

receive one or more challenges from the member server;

answer the challenges employing the secret; and

manage the member server.

25. A management module, comprising:

a first and a second interface; and

a controller coupled to the interface to receive from a remote management server over a secured link through the first interface, a request to access a member server of the community of servers;

authenticate the remote management server;

generate a secret; and

transmit the secret via the secure link to the management server, and via a management interconnect through the second interface, to the member server.

26. The management module of claim 25, wherein the controller is further equipped to generate the secret by generating a random number.

27. A member server of a community of servers, comprising:

first and second interfaces;

a server management controller coupled to the first and second interfaces equipped to

receive a secret from a management module of the community of servers through the first interface;

receiving initiation of management session from a management server through the second interface;

issuing challenges to the management server through the second interface;

receiving responses to the challenges from the management server through the second interface; and

validating the responses employing the secret.

28. The member server of claim 27, wherein the server management controller is further equipped to accept management commands for managing the member server from the management server.

29. A system comprising:

a management interconnect;

a member server coupled to the management interconnect; and

a management module coupled to the management interconnect, and equipped to cooperate with a management server in the establishment of a secure link, to receive the management server'"'"'s credentials for accessing the member server, to generate a secret, and to provide the secret to the management server and the member server.

30. The system of claim 29, wherein

the system further comprises a management server equipped to establish a secure link with the management module, present its credentials for accessing the member server, and receive a secret to facilitate accessing the member server.