Method, apparatus, and system for manageability and secure routing and endpoint access

摘要

A solution is presented to securing endpoints without the need for a separate bus or communication path. The solution allows for controlling access to endpoints by utilizing a management protocol by overlapping with existing interconnect communication paths in a packet format and utilizing a PCI address BDF (Bus number, Device number, and Function number) for verification.

主权项

1. A method for managing a secure endpoint comprising:
defining a first class and a second class of Management Component Transport Protocol (MCTP) endpoints interconnected by one or more buses; assigning a PCI Express configurable Bus number, a configurable Device number, and a configurable Function number (BDF) to the first class of MCTP endpoints; verifying a request from a device of the first class of MCTP endpoints based at least in part on the device's BDF and an access control list maintained by the second class of MCTP endpoints, wherein the request is included in a PCI Express Vendor Defined Message (VDM) packet and the device's BDF is the VMD header's PCI Requestor ID.