Vmware, Inc.

Muhammad Akbar

Ravishankar Chamarajnager

Michael Robert Jones

Glen McCready

Greg Bollella

Sudipto Mukhopadhyay

John E Brezak

Adith Sudhakar

Andrew Gormley

Barry Gerhardt

Georgi L Lyubomirov Dimitrov

Disclosed are various examples for enrollment of gateway enrollment for Internet-of-Things (IoT) device management. In some examples, a client device receives a gateway management installation package from a management service. The client device installs a gateway management application to the gateway device using the installation package. Enrollment credentials are entered through a user interface generated using the gateway management application and shown on the client device. The client device instructs the gateway management application enroll the gateway device with the management service. Usage of the enrollment credentials prevents a user from being exposed to gateway credentials that authenticate communications between the gateway device and the management service.

Gateway enrollment for Internet of Things device management

Disclosed are various examples for enrollment of gateway enrollment for Internet-of-Things (IoT) device management. In one example, the gateway device transmits an enrollment request to a management service. The enrollment request includes enrollment credentials that are entered through a user interface. The gateway device receives gateway credentials that authenticate communications with a management service. Subsequent communications transmitted from the gateway device to the management service are authenticated using the gateway credentials.

Gateway enrollment for internet of things device management

Disclosed are various examples for enrollment of gateway enrollment for Internet-of-Things (IoT) device management. In one example, enrollment credentials are generated that permit functionality limited to enrollment operations. A request to enroll a gateway with the management service is received. The request includes the enrollment credentials, and is received from the gateway. Gateway credentials are generated for authentication of the gateway with the management service. The gateway credentials are transmitted to an application executed by the gateway without being provided to the user by the application. The gateway is authenticated with the management service using the gateway credentials.

The disclosure provides for authentication and/or authorization via persistable identity tokens, so an original identity provider (e.g., a user) does not need to be present upon initiating execution of a task. Examples include requesting a persistable token in exchange for a first live token. Based at least on the request for the persistable token complying with a first set of policies, receiving the persistable token. Based at least on a trigger event, requesting a second live token in exchange for the persistable token. Based at least on the request for the persistable token complying with a second set of policies, receiving the second live token. Based at least on receiving the second live token, initiating execution of a task using the second live token for authentication or authorization, wherein the execution of the task is contingent upon the authentication or authorization.

Persistable identity tokens

System and method for securely deploying a virtual machine in a data center is disclosed. In one embodiment, public keys are established between the requesting virtual machine and the deployed virtual machine, so that authentication and communication between the machines can occur using the public keys. In another embodiment, a secret private key is established between the requesting virtual machine and the deployed virtual machine using a password authenticated key exchange protocol. Authentication and communication between the machines is then established using the secret private key.

Automating establishment of initial mutual trust during deployment of a virtual appliance in a managed virtual data center environment

In a computer-implemented method for automating application updates in a virtual computing environment, an update script and a digital signature for the update script are received, where the update script comprises an application update for updating an application installed on the virtual computing environment. The digital signature of the update script is validated using a public key of the virtual computing environment. Provided the digital signature of the update script is validated, the update script is executed to update the application.

Growing community of inventors

Palo Alto, CA, United States of America

Muhammad Akbar