Dell Products Inc.

Dell & Products L.p.

Deepaganesh Paulraj

Ankit Kumar Singh

Rama Rao Bisa

Akkiah Choudary Maddukuri

Lee Eric Ballard

Vaideeswaran Ganesan

Pavan Kumar Gavvala

Mahesh Babu Ramaiah

Manjunath Am

Naveen Karthick Chandrasekaran

Elie Antoun Jreij

Chitrak Gupta

Min Gong

Vinod Parackal Saby

Vinod P S

Kala Sampathkumar

Mini Thottunkal Thankappan

Ashok Narayanan Potti

Dale Wang

Sivakami Velusamy

Mukund Purshottam Khatri

Rajeshkumar Ichchhubhai Patel

Sushma Basavarajaiah

Robert Talbott Stevens, Iv

Manjunath Vishwanath

Aniruddha Suresh Herekar

Kalyani Korubilli

Hiren Kishorbhai Pitroda

Darshan Hebbar

Anusha Ghali

Sandesh Hadhimane Balakrishna

Nishaa Bouvanasilan

Timothy Michael Lambert

Wade Andrew Butcher

Dominique Prunier

Chandrasekhar Puthillathe

Shinose Abdul Rahiman

Sanjay Rao

Donald W Gerhart

Jitendra Kumar

Balamurugan Gnanasambandam

Jun Gu

Farhan Mohammed Syed

Chandrasekhar R

Jon Vernon Franklin

Jitendra Kumar Rath

Jason C Dale

Yayun Liu

George Harris

Zijia Wang

Manjunath A M

Sriparna Som

Robin Mathew

Rochak Gupta

Nishi

Chandran Venkatachalam

Anil V Rao

Sai Bale

Sai Suryanarayan

Nagaveni C

Colby Harper

Douglas J Roberts

Abhishek Ramachandra Manganawar

Ankit Singh

Managing devices at an information handling system, including coupling a non-standard device list (SDL) device with an information handling system, the non-SDL device associated with a first communication protocol; establishing a communication channel between the non-SDL device and a remote access controller (RAC) of a private cloud server, the RAC associated with a second communication protocol; identifying a metadata template associated with the non-SDL device, the metadata template indicating one or more parameters associated with the non-SDL device; converting, based on the parameters of the metadata template of the non-SDL device, a request from the second communication protocol to the first communication protocol; and providing, using the first communication protocol, the converted request to the non-SDL device.

Managing non-SDL devices at an information handling system

Systems and methods provide multi-mode validation of modifications to an IHS (Information Handling System) that is factory-provisioned and shipped with hardware capabilities that are not enabled. During factory provisioning of the IHS, two factory-signed certificates are uploaded to the IHS. An inventory certificate identifies factory-installed hardware of the IHS and a capabilities certificate identifies factory-provisioned hardware capabilities of the IHS, such as licensable features of the IHS. Upon deployment of the IHS, multiple validation modes are available. One mode uses the inventory certificate to validate the detected IHS hardware as factory-installed. Another mode uses the capabilities certificate to validate the factory-provisioned hardware capabilities of the IHS that are not enabled. Another mode uses the capabilities certificate to enable a validated factory-provisioned hardware capability of the IHS.

Multi-mode validation of modifications to an IHS

In one or more embodiments, a server may have a remote access controller (RAC) storing a BIOS image. A private cloud server (PCS) communicatively coupled to the RAC may scan the BIOS image. If the BIOS image is compromised, embodiments may access a centralized repository storing information about a plurality of versions of firmware in the server. If there is a previous version with a better performance, a payload for the previous version may be retrieved from a backup service and sent to the RAC. Embodiments may monitor and update a plurality of servers in parallel and rollback to any previous version (N−M) instead of the immediately preceding version (N−1).

System and method for centralizing a repository for virtual deployment

Systems and methods provide multi-modal based updates to firmware utilized by a hardware component of an IHS (Information Handling System), where the firmware updates are managed by a remote access controller of the IHS that provides remote management of the hardware component. The remote access controller receives a notification of an update to an agreement for utilization of the hardware component, where the agreement indicates firmware modes authorized for use by the hardware component. Firmware modes are identified that are locally stored by the hardware component. Any firmware modes are identified that are authorized for use by the hardware component based on the updated first agreement and that are not locally stored by the hardware component, and the identified firmware modes are retrieved for local storage by the hardware component. In this manner, firmware utilized in an IHS remains consistent with applicable service agreements.

Systems and methods for multi-modal firmware updates

Systems and methods update firmware during authentication of a hardware component of an IHS (Information Handling System), where firmware updates are managed by a remote access controller that provides remote management of the IHS. The remote access controller calculates a measurement based on firmware loaded for use by a hardware component of the IHS. Based on the measurement, an integrity of the firmware loaded for use by the hardware component is validated against a reference signature. When the integrity of the firmware is not validated, the hardware component is quarantined. When the integrity of the firmware is successfully validated, the remote access controller determines whether a firmware update is required for the firmware loaded by the hardware component. When a firmware update is required, an integrity of the updated firmware is validated, the updated firmware is loaded by the hardware component and further initialization of the hardware component is allowed.

Systems and methods for updates during firmware authentication

Embodiments of systems and methods to provide a firmware update to multiple storage units configured with different interfaces in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a firmware update image associated with the storage units, and for each of the storage units, identify an update profile based on the type of interface associated with the storage unit, the interface configured to provide communication between the storage unit and the IHS, and perform a firmware update on the storage unit according to the update profile.

Systems and methods for topology aware firmware updates

Methods and systems for managing an interactive user assistance system that provides a rich multimodal content experience for a user are disclosed. In particular, hyperlinks may be included in responses generated for the user's questions to the system. These hyperlinks may take the user to one or more videos or video clips containing content that would assist the user in better resolving the user's questions. The videos or video clips may be stored in a hierarchically managed video clip pool that provides efficient retrieval and association with related content for enhancing the user's access to such multimodal content.

Interactive user assistance system with rich multimodal content experience

Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a target firmware update image associated with a first of the devices, establish a shared memory communication channel with the first device, store the target firmware update image in the shared memory communication channel, and using the shared memory communication channel, perform a firmware update on the first device using the stored target firmware update image.

Systems and methods for use of a firmware update proxy

Systems and methods are provided for validation and enforcement of the use of factory-provisioned environmental restrictions for the operation of certain hardware components of IHSs (Information Handling Systems). During factory provisioning of the IHS, a factory-signed certificate is uploaded to the IHS that identifies the factory-installed hardware of the IHS and any thermal restrictions on that hardware, such as operating temperature boundary requirements for the hardware. Upon deployment of the IHS, validation procedures use an inventory from the certificate to validate the detected IHS hardware as factory-installed. The validation procedures use the thermal restriction from the certificate to confirm the detected IHS hardware is configured to operate within the factory-provisioned thermal restrictions. The thermal restrictions from the certificate are also used to validate relocation of the IHS to different ambient environments.

Validation of environmental restrictions on IHS operations

Systems and methods provide an Information Handling System (IHS) comprising a host processor module configured to host at least one smart device and a secure control module configured to host a Baseboard Management Controller (BMC). The BMC validates identities and determine capabilities of the at least one smart device using Security Protocol and Data Model (SPDM) messages. The BMC sends a network access identity to the at least one smart device using an SPDM message. The BMC receives a request for a network connection from the at least one smart device, wherein the request includes the network access identity. The BMC performs authentication server functions to approve the network connection request. The BMC then sends a message to the at least one smart device indicating that a port or NC-SI channel is authorized for network access.

Secure access via 802.1X port-based network access control (PNAC)

Methods and systems for managing the operation of data processing systems are disclosed. A data processing system may include a computing device that may provide computer implemented services. To provide the computer implemented services, hardware components of the data processing system may need to operate in predetermined manners. To manage the operation of the hardware components, the data processing system may heat them when their temperatures fall outside of thermal operating ranges. To manage the hardware components when heating is unavailable, the data processing system may proactively heat them to elevated goal temperature ahead of periods of time when heating is unavailable.

System and method for managing unavailability of management components

In one or more embodiments, a server may have a server operating system (OS) and a component with a component OS. During a boot process, embodiments may ensure the server OS does not boot until after the component OS boots. During a shutdown process, embodiments may ensure the server OS does not shut down until after the component OS shuts down. In systems with multiple Remote Access Controller, embodiments may synchronize processing between the two RACs.

System and method for boot and shutdown synchronization of server operating system and component operating system

In one or more embodiments, one or more systems may comprise a Remote Access Controller (RAC) configured with a minimum number of built-in features and a private cloud server (PCS) communicatively coupled to the RAC and storing a set of available services retrieved from an external cloud server. The RAC may be configured to communicate with a DHCP service, an onboarding service and a RAC proxy service to send a RAC hardware identity certificate and receive a RAC proxy service certificate. If the RAC hardware identity certificate and the RAC proxy service certificate are authenticated, the RAC proxy service may establish a binding with RAC firmware.

System and method for discovery and binding of remote access controller firmware to a proxy service

Methods, apparatus, and processor-readable storage media for automatically generating task-based and limited-privilege user security credentials are provided herein. An example computer-implemented method includes processing a request for user security credentials against one or more predetermined security parameters associated with at least one network; generating, based on the processing of the request, at least one set of user security credentials comprising one or more combinations of multiple randomly selected characters; configuring one or more attributes associated with the at least one set of user security credentials in connection with the at least one network, wherein the one or more attributes comprise at least one of one or more task-related attributes and one or more privilege-related attributes; and performing one or more automated actions based on the one or more configured attributes and/or implementation of the at least one set of user security credentials by one or more users.

Automatically generating task-based and limited-privilege user security credentials

An information handling system may include a host system, a management controller configured to provide out-of-band management of the information handling system, and a network interface controller. The management controller may be configured to: determine an inventory of the network interface controller, the inventory indicating at least one component having a firmware; retrieve a firmware update image for updating the firmware; and cause the network interface controller to boot from the firmware update image, the firmware update image being configured to install an update to the firmware.

Secure smart network interface controller firmware update

Growing community of inventors

Bengaluru, India

Deepaganesh Paulraj