US 12,223,339 B2
Management of secrets during deployment of virtual environment
James Duncan Parsons, Enfield (GB); and Peter John Whiting, London (GB)
Assigned to Microsoft Technology Licensing, LLC, Redmond, WA (US)
Filed by MICROSOFT TECHNOLOGY LICENSING, LLC, Redmond, WA (US)
Filed on Nov. 30, 2021, as Appl. No. 17/539,161.
Claims priority of provisional application 63/242,439, filed on Sep. 9, 2021.
Prior Publication US 2023/0073812 A1, Mar. 9, 2023
Int. Cl. G06F 9/455 (2018.01); G06F 16/21 (2019.01)
CPC G06F 9/45558 (2013.01) [G06F 16/212 (2019.01); G06F 2009/4557 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A method for deploying, by a deployment function, a user-specific configuration in a virtualized computing environment, the virtualized computing environment comprising a plurality of virtual machines, the method comprising:
generating a solution definition file (SDF) that defines the user-specific configuration for a deployment in accordance with the user-specific configuration, the deployment including a set of the plurality of the virtual machines configured to interoperate during the deployment;
adding, in the SDF, identifiers for a plurality of secrets to be used by the deployment;
generating a schema defining a format for each identifier in the SDF and a format of each of the secrets corresponding to each of the identifiers;
validating the secrets for the set of VMs configured to interoperate during the deployment, the validating including detecting whether requirements for any of the secrets have changed and confirming that the secrets conform to rules defined in the schema;
storing the secrets to be used by the deployment and corresponding identifiers in a secure storage;
deploying the set of the plurality of the virtual machines in a target computing environment in accordance with the SDF; and
sending data indicative of the identifiers in the SDF to the deployed virtual machines, the data usable by the virtual machines to obtain the corresponding secret from the secure storage.