PERSISTENT DATA SECURITY FOR DATA PROCESSING UNITS
Systems and methods are described for secure management of a data processing unit ("DPU"). In an example, a baseboard management controller ("BMC") can provision a DPU. Provisioning can include configuring a local storage device for DPU storage and locking access to the DPU stora...
Gespeichert in:
Hauptverfasser: | , , , |
---|---|
Format: | Patent |
Sprache: | eng |
Schlagworte: | |
Online-Zugang: | Volltext bestellen |
Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
Zusammenfassung: | Systems and methods are described for secure management of a data processing unit ("DPU"). In an example, a baseboard management controller ("BMC") can provision a DPU. Provisioning can include configuring a local storage device for DPU storage and locking access to the DPU storage with an encrypted access key. To boot the DPU, the BMC can initiate DPU firmware on the DPU. The DPU firmware can retrieve the access key from the BMC and unlock the DPU storage with the access key. The DPU firmware can be configured to then delete the access key. Once the DPU storage is unlocked, the DPU firmware can load an operating system of the DPU. The BMC can be the only entity that retains the access key. To perform a secure wipe, instructions can be provided to the BMC to delete the access key, which renders the DPU storage and all data therein inaccessible. |
---|