Dell Products Inc.

Emc IP Holding Company LLC

Anurag Sharma

Marcelo Vinante

Senthil Ponnuswamy

Chitrak Gupta

Chandrasekhar Puthillathe

Elie Antoun Jreij

Daniel E Cummins

Rajib Saha

Chegu Vinod

John M Moran

Christopher Trudel

Michael Emery Brown

Bradley K Goodman

Maunish A Shah

Kirk Hutchinson

Raghavendra Venkataramudu

Anjali Anjali

Joji John

Shoham Levy

Rekha Sampath

Yedidia Atzmony

Sujayendra R Thammaiah

Jo Ann Varble

Brian P Korinek

Eric Dequin

Sudhir Vittal Shetty

Muzhar S Khokhar

Jason Matthew Young

Dominique Prunier

Rajeshkumar Ichchhubhai Patel

Eric Williams

Pushkala Iyer

Ramesha He

Gavin D Scott

Linwood W Zoller, Iv

Chinmay Shripad Hegde

Jitendra Kumar Rath

Aaron W Spiegel

Eddie Pavkovic

Ramesh Ramanathan

Ranjini Gogga

Sunil Bhaskarnaidu

Matt Puerkel

Jeffrey T Glenn

Igal Moshkovich

A disclosed method for providing a non-credentialed user (NCU) with secure access to a remote endpoint of an edge computing platform, generates a support voucher for the NCU wherein the support voucher comprises a temporary ownership voucher including one or more digital signatures establishing a chain of trust from a root of trust to the NCU. The method provides a private key associated with the support voucher to the NCU. Responsive to detecting the NCU, using the private key to log into an edge platform resource and determining that the support voucher is recognized by the edge platform resource, the NCU is authenticated and the support voucher is validated to establish the NCU as a designated owner of the remote endpoint. Responsive to establishing the NCU as a designated owner, the NCU may access the edge platform resource and from there access the platform endpoint.

Secure remote support for edge computing platform

A system detects a failed server in a cluster of servers, which are controlled by a master node to execute applications and store data, in service tiers, which correspond to sets of server performance characteristics, in storage domains, which correspond to server racks, in the cluster of servers. By accessing a cluster database, the system identifies applications installed on the failed server and any affinities that the identified applications have for any type of server, any service tier, and/or any storage domain. The system uses the cluster's current configuration to update the identified affinities for the identified applications. After the updated affinities for the identified applications is provided to the cluster database, a master node is enabled to identify replacement server(s), for the identified applications, and install the identified applications in the identified replacement server(s), thereby enabling the replacement server(s) to substitute for the failed server and store data.

Managing storage domains, service tiers, and failed servers

Techniques described herein relate to a method for provisioning and managing resources on resource providers. The method may include obtaining, by a primary resource provider (RP) node in an RP environment, node information associated with other RP nodes in the RP environment; instantiating a blueprint orchestrator using a blueprint orchestrator template; in response to instantiating the blueprint orchestrator: identifying a user associated with the RP environment using a user order file; identifying a first RP type and a second RP type associated with the user; providing prompt files associated with the first RP type and the second RP type to the user; obtaining answer files associated with the prompt files from the user; generating a blueprint based on the answer files and a blueprint template; composing RP resources on the RP environment using the blueprint and node information; and performing operations on the RP resources using the blueprint.

Generic multi-cloud infrastructure for composing heterogeneous cloud resources

An edge processing system includes first and second information handling systems. The first information handling system orchestrates the edge processing system, and creates a first key pair including a first private key and a first public key. The second information handling system receives fabric agent code that includes the first public key, a second key pair including a second private key and a second public key, and an address of the first information handling system. The second information handling system executes the fabric agent code to provide an access request to the address. The access request is encoded with the first public key. The first information handling system authenticates the access request with the first private key, and provides external compute fabric code to the second information handling system in response to authenticating the access request. The second information handling system instantiates the external compute fabric code to manage end points of the edge processing system.

Secure onboarding of external compute fabric in an edge horizontal platform

A voucher management system receives, from a computing device manufacturer system, an ownership voucher that transfers ownership of a computing device from the computing device manufacturer system to the voucher management system, and a hardware attestation certificate for the computing device, and associates them with the computing device in a voucher management database. When the voucher management system determines that the ownership of the computing device should be transferred to an end user system, it automatically generates second ownership transfer data by signing an end user system public key with a voucher management system private key, provides the second ownership transfer data in the ownership voucher in order to transfer ownership of the computing device from the voucher management system to the end user system, and provides the ownership voucher and the hardware attestation certificate to the end user system.

Fast identity online (FIDO) device onboarding (FDO) protocol computing device hardware attestation system

An information handling system includes a memory and a processor. The memory stores an owner public key associated with an owner of the information handling system. The processor receives a cryptographically signed message including a chain of certificates that includes first and second certificates. The processor determines whether the first certificate within the chain of certificates delegates authority to a first user based on the owner public key. In response to the first certificate delegating authority to the first user, the processor determines whether the second certificate delegates authority from the first user to a second user. Based on the first and second certificates, the processor verifies the cryptographically signed message as an authoritative message. In response to the cryptographically signed message being verified as the authoritative message, the processor executes a request associated with the cryptographically signed message.

Chained cryptographically signed certificates to convey and delegate trust and authority in a multiple node environment

An intelligent method of mutual validation between a cluster manager and a new node, also enabling automatic signing of an application certificate for the new node. A root certificate authority is embedded in a cluster manager at the factory. The certificate includes the cluster manager serial number. Similarly, a certificate is embedded in an appliance to be joined as a new node, the certificate including the appliance's serial number. When requesting to join the cluster, the node sends its certificate to the cluster manager. The cluster manager verifies that the serial number in the certificate matches a serial number in its white list and validates the certificate ownership by the node. Conversely, the cluster manager sends its certificate to the node, so that the node can verify its communicating with a valid cluster manager. The node can then ask the manager to sign its application certificate, and the manager uses its root certificate authority to sign the certificate.

Method to establish an application level SSL certificate hierarchy between master node and capacity nodes based on hardware level certificate hierarchy

Methods, apparatus, and processor-readable storage media for dynamically unifying disparate UI applications in a cloud native environment are provided herein. An example computer-implemented method includes obtaining information pertaining to a container-orchestration system operating within at least one cloud native environment; configuring, based on the obtained information, a single sign-on authentication mechanism for multiple user interface applications in the container-orchestration system; configuring, based on the obtained information, at least one ingress route for two or more of the multiple user interface applications in the container-orchestration system; configuring and rendering, based on information pertaining to the at least one ingress route, a common header in at least each of the two or more user interface applications; and performing one or more automated actions based on the configured single sign-on authentication mechanism, the at least one configured ingress route, and the configured and rendered common header.

Dynamically unifying disparate user interface applications in a cloud native environment

A control plane management node of a multiple node environment includes a storage and a processor. The processor detects a user of the multiple node environment and provides a plurality of key management configurations to the user. The key management configurations include first and second key management configurations. In response to a first key management configuration being selected, the node creates a private key for the user, and stores the private key within a storage of the node. In response to the second key management configuration being selected, the node configures the user node to create the private key, and configures the user node to store the private key within a storage of the user node.

Disaggregated key management in a distributed system

Methods, apparatus, and processor-readable storage media for automated storage system performance validation are provided herein. An example computer-implemented method includes obtaining user input pertaining to performance testing associated with one or more storage systems deployed in at least one user environment; generating, based at least in part on the obtained user input, a storage system performance test deployment environment comprising at least one controller and at least one data collection mechanism; executing, using the storage system performance test deployment environment, at least one performance test on at least a portion of the one or more storage systems deployed in the at least one user environment; and performing one or more automated actions based at least in part on results from the at least one executed performance test.

Automated storage system performance validation

A system, method, and computer-readable medium are disclosed for performing a data center connectivity management operation. The connectivity management operation includes: providing a data center asset with a data center asset client module and a host operating system agent; establishing a secure communication channel between the data center asset client module and a connectivity management system, the connectivity management system comprising a service mesh proxy; exchanging information between the data center asset and the connectivity management system via the secure communication channel between the data center asset and the connectivity management system; and, remotely executing a workload on the data center asset via a workload orchestration operation, the service mesh proxy communicating with the host operating system agent when performing the workload orchestration operation.

Data center asset remote workload execution via a connectivity management workload orchestration operation

An Information Handling System (IHS) includes multiple hardware devices, and a baseboard Management Controller (BMC) in communication with the plurality of hardware devices. The BMC includes executable instructions for identifying at least one non-registered hardware device from among the multiple hardware devices that is not registered for use within the IHS by the BMC. For this non-registered hardware device, the BMC generates power profile data. Using the power profile data of the non-registered hardware device, the BMC determines a level of electrical power to sufficiently supply the plurality of hardware devices of the IHS, and controls one or more power supply units to supply the determined level of electrical power to the plurality of hardware devices.

System and method for highly granular power/thermal control in information handling systems

Techniques comprise receiving results from one or more configuration checks performed on one or more elements of an information processing system, wherein the results are received from a set of one or more interfaces of the information processing system and comprise an indication of detection of a configuration issue with at least a portion of the one or more elements of the information processing system. The method generates one or more remediation actions based on at least a portion of the received results, and then causes initiation of the one or more remediation actions within the information processing system at least in part through the set of one or more interfaces of the information processing system from which the results are received to effectuate remediation of the configuration issue with the portion of the one or more elements of the information processing system.

Dynamic remediation actions in response to configuration checks in an information processing system

Two-way secure channels are provided between multiple services across service groups, where the certification is performed by a certificate authority associated with one of the service groups. One method comprises a first service providing a first handshake communication with a first token to a second service, wherein the first service obtains the first token by authenticating with an identity and access management service having a first certificate signed by a certificate authority, wherein the first handshake communication succeeds when the second service has a second certificate signed by the certificate authority, and wherein the second service obtains a second token by authenticating with the identity and access management service. The first service receives a second handshake communication from the second service with the second token. Communications are enabled between the first and second services over a two-way authenticated channel when the first service has a third certificate signed by the certificate authority.

Two-way secure channels between multiple services across service groups

Methods, apparatus, and processor-readable storage media for automated delivery of cloud native application updates using one or more user-connection gateways are provided herein. An example computer-implemented method includes generating an application update package pertaining to a cloud native application; generating a manifest file comprising identifying information for the application update package and metadata pertaining to implementing the application update package; outputting, to a user device via a user-connection gateway, a request for automated remote action on an application within a user environment associated with the user device; processing, via the user-connection gateway, a response from the user device approving the request for automated remote action; outputting the manifest file to the user environment associated with the user device; and initiating, in accordance with the manifest file, automated implementation of the application update package to the application within the user environment.

Automated delivery of cloud native application updates using one or more user-connection gateways

Growing community of inventors

Cedar Park, TX, United States of America

Anurag Sharma