Establishment of trust between connected network devices

Abstract

Techniques for switches to establish trust with connected network interface cards (NICs) without the need of authorization servers. When an unauthorized NIC of a server is connected to a port of a switch, the switch provides port security such that hosts running on the server are unable to gain unauthorized access to resources. The switch may apply a default ACL to unauthorized NICs that allows limited communications, such as only communications to foundation services. The switch may establish trust with NICs using Public Key Infrastructure (PKI) vended identities. The unauthorized NIC may perform an attestation handshake with a PKI service to receive an identity certificate. A root certificate of a PKI service is stored on the switch which is used by the switch to verify the identity certificate of the NIC. Once authorized, the switch may construct ACLs that permit the NIC to communicate with other resources.