Dell Products Inc.

Dell & Products L.p.

Balasingh Ponraj Samuel

Richard Martin Tonry

Anand Prakash Joshi

Vivek Viswanathan Iyer

Ibrahim Sayyed

Ricardo Luis Martinez

Adolfo Sandor Montero

Michael Wayne Arms

Nicholas Diciurcio Grobelny

Craig Lawrence Chaiken

Daniel Lawrence Hamlin

Travis Christian North

Jacob Vincent Mink

Sungsup Lee

Qinghong He

Srikanth Kondapi

Vivekanandh Narayanasamy Rajagopalan

Steven Downum

Shekar Babu Suryanarayana

Sumanth Vidyadhara

Alok Pant

Alan H Abdelhalim

Zhao Hui Yu

Baris Tas

Walter Phillips

Wai-Ming Richard Chan

Siva Subramaniam Rajan

Chris Edward Pepper

Kurt David Gillespie

Vinod Makhija

Jagadish Babu Jonnada

Fnu Jasleen

Shubham Kumar

Bibby Yeh

Xiaomei Zhu

Manjunath Gr

Tuck Meng Chin

Zhaohui Yu

Jonathan D Samuel

Gandali Patil

Girish S Dhoble

Garrett B Oncale

Debasish Nath

Jim Leo LaMarre

Prabhash Kumar

Information Handling Systems (IHSs) support pre-boot telemetry for use in a zero-trust environment. A pre-boot telemetry orchestrator of the IHS retrieves a factory-provisioned resource locator of a service that provides a location of a policy decision point of the zero-trust environment. The pre-boot telemetry orchestrator establishes an encrypted session with the policy decision point that is located using the factory-provisioned resource locator. Via the encrypted session, the pre-boot telemetry orchestrator receives a telemetry definition specifying pre-boot telemetry to be collected by the IHS. The telemetry is collected and transmitted during the pre-boot intervals according to the telemetry definition.

Telemetry-initiated mitigations in a zero-trust computing environment

Systems and methods for post-accident health assurance in an Information Handling System (IHS) are described. In some embodiments, an IHS may include a processor and a memory coupled to the processor, where the memory comprises program instructions that, upon execution by the processor, cause a Basic Input/Output System (BIOS) to execute a diagnostics routine during a reboot in response to a determination that the IHS suffered an accident prior to the reboot.

Post-accident health assurance in an Information Handling System

Systems and methods for data backup and restore operations in response to accidents are described. In some embodiments, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause an Operating System (OS) to receive an accident indication and change a data backup setting in response to the indication.

Data backup and restore operations in response to accidents

Systems and methods for configuring peripherals in response to accidents are described. In some embodiments, an Information Handling System (IHS) may include: a processor; and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the IHS to: obtain a notification of a shock event of the IHS; communicate information regarding the shock event to peripheral firmware of one or more peripherals of the IHS. The peripheral firmware may receive the information regarding the shock event of the IHS from the IHS; and responsive to the information, perform a corrective action. In some embodiments, the corrective action includes a configuration update and a communication to the IHS of the configuration update, a self-test scan for health of the peripheral, shutting off port or data access to the peripheral, and/or collection of telemetry of the peripheral.

Configuring peripherals in response to accidents

An information handling system may include a processor and a program of instructions embodied in non-transitory computer-readable media, the program of instructions configured to, when read and executed by the processor: determine if an application-related event associated with an executable application has occurred; based on one or more performance profiles, wherein each of the one or more performance profiles are associated with a respective executable application, select an executing application having a highest rank as a selected application; and communicate a selected performance profile associated with the selected application to a management device of the information handling system to cause the management device to apply a temperature limit and an acoustic limit associated with the selected performance profile to the performance of the information handling system.

Systems and methods for estimating information handling system performance capacity based on temperature and acoustic parameters

Systems and methods support collection of validated telemetry by an Information Handling System (IHS). A policy decision point (PDP) of a zero-trust computing environment controls access to protected resources The PDP identifies a telemetry stream of the IHS to be validated and identifies a telemetry definition specifying telemetry being collected by the IHS. The PDP updates the telemetry definition to specify adjustments to telemetry streams of the IHS to be authenticated and transmits the updated telemetry definition to the IHS. The IHS identifies telemetry that is ready for transmission and, based on the updated telemetry definition received from the policy decision point, generates a digital signature that authenticates the telemetry that is ready for transmission. The authenticated telemetry is transmitted to one or more destinations specified in the updated telemetry definition.

Validated telemetry in a zero-trust computing environment

An information handling system may include a processor and a program of instructions embodied in non-transitory computer-readable media, the program of instructions configured to, when read and executed by the processor: receive a touch temperature limit parameter indicative of a temperature limit; receive an acoustic noise limit parameter indicative of an acoustic noise limit; determine an estimated power capacity limit parameter indicative of an estimated power limit based on the touch temperature limit parameter and the acoustic noise limit parameter; and determine an estimated performance capability parameter based on the estimated power capacity limit parameter.

Systems and methods support collection of telemetry by an Information Handling System (IHS). A policy decision point of a zero-trust computing environment controls access to protected resources and receives an indication of attack related to the IHS. A telemetry definition is identified that specifies telemetry being collected by the IHS and it is updated to specify a security delay for telemetry related to the indication of attack. The updated telemetry definition is transmitted to the IHS. Upon identifying telemetry that is ready for transmission, the IHS determines whether the telemetry is subject to a security delay specified in the updated telemetry definition. When the telemetry is subject to a security delay, the telemetry that is ready for transmission is queued and transmitted to one or more destinations specified in the updated telemetry definition upon expiration of the security delay.

Security-linked telemetry in a zero-trust computing environment

A peripheral device workspace cloud orchestrator executing at a cloud-based information handling system comprises a hardware processor to execute code instructions to determine a usage category from operational telemetry data for a current peripheral device workspace having an anchor node and current peripheral devices operatively coupled at a location, the usage category defined by a previous peripheral device operational telemetry data, previous manifest of previous peripheral devices within a previous peripheral device workspace, and at least one previous functional capability and previous adjustable operational configuration of a previous peripheral device. The hardware processor to determine a functional capability for a current peripheral device sufficiently matches the previous functional capability for the usage category and instructs the anchor node to automatically configure the current peripheral device according to the previous adjustable operational configuration in that usage category.

System and method for intelligent transference of peripheral device operational configurations across peripheral device workspaces based on shared usage patterns

Systems and methods for accident detection and handling are described. In some embodiments, an Information Handling System (IHS) may include an Embedded Controller (EC), and a memory coupled to, or integrated into, the EC, where the memory comprises program instructions that, upon execution by the EC, cause the EC to, in response to a determination that the IHS suffered an accident prior to a reboot, transmit an indication of the accident to a remote service during the reboot.

Systems and methods for accident detection and handling

A basic input/output system (BIOS) determine whether an automated recovery mechanism is enabled in response to a detection of a data corruption. An embedded controller may extract recovery data from a storage device upon confirmation that the automated recovery mechanism is enabled. In response to verification that the recovery data is valid, the controller may decrypt a BIOS firmware data in the recovery data and push the BIOS firmware data into a non-volatile random access memory, and decrypt an embedded controller firmware data in the recovery data and push the embedded controller firmware data into the non-volatile random access memory.

Improving restoration of firmware data

Disclosed methods for enabling flexible policies for user access to BIOS attribute settings perform operations including creating a BIOS attribute map encompassing one or more configurable BIOS attributes, generating a role-based authorization table associating an authorization role to each of the configurable BIOS attributes, and deploying the role-based authorization table to an information handling system. Responsive to a user launching a BIOS attribute configuration tool, a user role associated with the user is detected and the role-based authorization table is retrieved. Based on the role-based authorization table and the user role, configurable BIOS attributes for the user are identified. The configurable BIOS attributes may then be presented to the BIOS configuration to enable the user to perform configuration operations for the configurable BIOS attributes.

Enabling flexible policies for BIOS settings access with role-based authentication

An information handling system includes a processor and an embedded controller. The processor executes operations while the information handling system is in an active power state. The embedded controller communicates with the processor. While the information handling system is in the active power state, the embedded controller detects a trigger event. In response to the trigger event, the embedded controller provides a ping command to the processor. Based on a response to the ping command not being received, the embedded controller determines a processor freeze, stores forensic data associated with the processor freeze, and stores an indication to perform a processor freeze recovery during a next boot operation.

Collection of forensic data after a processor freeze

Disclosed methods and system feature or perform operations including monitoring, within an operating system (OS) environment of an information handling system, telemetry data indicative of values for one or more hardware status parameters and generating any of one or more anomaly alerts responsive to identifying any of one or more anomalous conditions. Responsive to detecting an anomaly alert, an OS-context configuration may be determined based on the hardware status parameters monitored during a timebox associated with the anomaly alert. Responsive to detecting a reset of the information handling system, preboot operations may be performed wherein the pre-boot operations may include configuring the information handling system in accordance with the OS-context configuration and performing one or more hardware diagnostic routines while the information handling system is configured in accordance with the OS-context configuration.

Preserving hardware status points in operating system environment for use in preboot diagnostics

Systems and methods for memory serviceability mitigation are described. In some embodiments, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to: after failure of a memory device, notify a cloud service and enter a mitigation mode of operation with respect to the memory device, receive a message from the cloud service indicative of the provisioning of a replacement memory device, and, in response to the message and upon detection of a chassis intrusion event, leave the mitigation mode of operation with respect to the replacement memory device.

Systems and methods for memory serviceability mitigation

Growing community of inventors

Round Rock, TX, United States of America

Balasingh Ponraj Samuel