Abstract: The ability to submit and execute secured commands on a device is controlled using an interface authenticator. The interface authenticator includes a processor and physical memory that stores key material. When the interface authenticator is connected to the device the device communicates with the interface authenticator to cryptographically verify that the interface authenticator is valid. If the interface authenticator is valid, the device allows controlled commands to be received. In some examples, the controlled commands are obtained via a sideband data channel pass-through access and executed on a management controller within the device. In some examples, as a result of determining that the interface authenticator is valid, a sideband data channel pass-through access is enabled over which both privileged and uncontrolled commands may be received.