Actively provisioning a managed node

• US 9,172,583 B1
• Filed: 11/22/2011
• Issued: 10/27/2015
• Est. Priority Date: 11/22/2011
• Status: Active Grant

• Current Assignee: Ivanti, Inc. (Ivanti Software, Inc.)
• Original Assignee: Crimson Corporation
• Inventors: Dong, Xiaoming
• Primary Examiner(s): LI, GUANG W
• Application Number:
  US13/302,171
• Time in Patent Office: 1,435 Days
• Field of Search: 709/224
• US Class Current: 1/1
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 69/18 Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A computing device configured for actively provisioning a managed node is described. The computing device includes a processor and executable instructions stored in memory that is in electronic communication with the processor. The computing device identifies a managed node on a network. The computing device also determines whether the managed node comprises management hardware. The computing device further enables the management hardware. To enable the management hardware, the computing device opens hardware-based secure communication between the computing device and the node, allows access to a remote management engine and provisions the management engine. The computer device additionally adds the managed node to a database.

Claims

1. A computing device configured for actively provisioning a managed node, comprising:

a processor;

memory in electronic communication with the processor;

instructions stored in the memory, the instructions being executable to;

identify a managed node on a network;

determine whether the managed node comprises management hardware, wherein the management hardware comprises a processor, chipset and network adaptor that are separate from hardware utilized by an operating system of the managed node, wherein the management hardware utilizes a first network stack, wherein the hardware utilized by an operating system of the managed node utilizes a physical port to connect with the network and the management hardware utilizes the physical port to connect with the network, wherein the operating system of the managed node utilizes a second network stack that is separate from the first network stack;

enable the management hardware, wherein enabling comprises;

opening hardware-based secure communication between the computing device and the node;

allowing access to a management engine; and

provisioning the management engine, wherein provisioning the management engine comprises changing settings for the managed node; and

add the managed node to a database.

2. The computing device of claim 1, wherein identifying the managed node further comprises detecting a new node being added to the network.

3. The computing device of claim 1, wherein provisioning the management engine further comprises changing the management hardware to a specific state.

4. The computing device of claim 1, wherein the instructions are further executable to configure the managed node.

5. The computing device of claim 1, wherein the computing device is connected to the managed node by an out-of-band connection.

6. The computing device of claim 1, wherein the management hardware further comprises Intel®

vPro Technology.

7. The computing device of claim 1, wherein the instructions are further executable to negotiate an authorized certificate.

8. The computing device of claim 1, wherein no agent is needed on the managed node.

9. A method for actively provisioning a managed node, comprising:

identifying a managed node on a network;

determining whether the managed node comprises management hardware, wherein the management hardware comprises a processor, chipset and network adaptor that are separate from hardware utilized by an operating system of the managed node, wherein the management hardware utilizes a first network stack, wherein the hardware utilized by an operating system of the managed node utilizes a physical port to connect with the network and the management hardware utilizes the physical port to connect with the network, wherein the operating system of the managed node utilizes a second network stack that is separate from the first network stack;

enabling the management hardware, wherein enabling comprises;

opening hardware-based secure communication between a computing device and the node;

allowing access to a management engine; and

provisioning the management engine, wherein provisioning the management engine comprises changing settings for the managed node; and

adding the managed node to a database.

10. The method of claim 9, wherein identifying the managed node further comprises detecting a new node being added to the network.

11. The method of claim 9, wherein provisioning the management engine further comprises changing the management hardware to a specific state.

12. The method of claim 9, further comprising configuring the managed node.

13. The method of claim 9, wherein the computing device is connected to the managed node by an out-of-band connection.

14. The method of claim 9, wherein the management hardware further comprises Intel®

vPro Technology.

15. The method of claim 9, further comprising negotiating an authorized certificate.

16. The method of claim 9, wherein no agent is needed on the managed node.

17. A non-transitory tangible computer-readable medium for actively provisioning a managed node comprising executable instructions for:

identifying a managed node on a network;

determining whether the managed node comprises management hardware, wherein the management hardware comprises a processor, chipset and network adaptor that are separate from hardware utilized by an operating system of the managed node, wherein the management hardware utilizes a first network stack, wherein the hardware utilized by an operating system of the managed node utilizes a physical port to connect with the network and the management hardware utilizes the physical port to connect with the network, wherein the operating system of the managed node utilizes a second network stack that is separate from the first network stack;

enabling the management hardware, wherein enabling comprises;

opening hardware-based secure communication between a computing device and the node;

allowing access to a management engine; and

provisioning the management engine, wherein provisioning the management engine comprises changing settings for the managed node; and

adding the managed node to a database.

18. The computer-readable medium of claim 17, wherein provisioning the management engine further comprises changing the management hardware to a specific state.