Dell Products Inc.

Dell & Products L.p.

Deepaganesh Paulraj

Ankit Kumar Singh

Rama Rao Bisa

Akkiah Choudary Maddukuri

Lee Eric Ballard

Vaideeswaran Ganesan

Min Gong

Pavan Kumar Gavvala

Mahesh Babu Ramaiah

Manjunath Am

Naveen Karthick Chandrasekaran

Elie Antoun Jreij

Chitrak Gupta

Vinod Parackal Saby

Ashok Narayanan Potti

Dale Wang

Vinod P S

Kala Sampathkumar

Mini Thottunkal Thankappan

Sivakami Velusamy

Mukund Purshottam Khatri

Rajeshkumar Ichchhubhai Patel

Sushma Basavarajaiah

Robert Talbott Stevens, Iv

Manjunath Vishwanath

Aniruddha Suresh Herekar

Kalyani Korubilli

Hiren Kishorbhai Pitroda

Darshan Hebbar

Anusha Ghali

Sandesh Hadhimane Balakrishna

Nishaa Bouvanasilan

Timothy Michael Lambert

Wade Andrew Butcher

Chandrasekhar Puthillathe

Dominique Prunier

Shinose Abdul Rahiman

Sanjay Rao

Donald W Gerhart

Jitendra Kumar

Balamurugan Gnanasambandam

Jun Gu

Farhan Mohammed Syed

Chandrasekhar R

Jon Vernon Franklin

Jitendra Kumar Rath

Zijia Wang

Jason C Dale

Yayun Liu

Sriparna Som

George Harris

Manjunath A M

Colby Harper

Douglas J Roberts

Nagaveni C

Abhishek Ramachandra Manganawar

Sai Suryanarayan

Sai Bale

Anil V Rao

Chandran Venkatachalam

Nishi

Rochak Gupta

Robin Mathew

An information handling system may initiate a secure boot process in response to a launch of a new virtual machine, and assign an identifier to the new virtual machine. In response to determining that the new virtual machine is to be associated with an authorized certificates database and an unauthorized certificates database, the system may compile a list of certificates for the new virtual machine. In response to determining that a first certificate from the list of certificates is to be included in the authorized certificates database, the system adds the first certificate to the authorized certificates database. In response to determining that a second certificate from the list of certificates is to be included in the unauthorized certificates database, the system adds the second certificate to the unauthorized certificates database.

Management of self-signed certificates for secure boot of virtual machines

Methods and systems for managing data processing systems are disclosed. A data processing system may include and depend on the operation of hardware and/or software components. Inference models may be implemented to predict future system infrastructure outcomes (e.g., component failures) using information recorded in logs that reflect the operation of the components. However, the models may be complex 'black boxes' and may generate critical outcome predictions for downstream consumers without explanations of how the predictions are determined, resulting in downstream consumers having low confidence in the predictions. Therefore, hidden knowledge (e.g., structured knowledge attributes) of the models may be extracted and/or used to understand the underlying processes that the models use to predict the system infrastructure outcomes. The hidden knowledge may be stored in a repository and may be provided for downstream use in order to increase the likelihood of preventing and/or mitigating future data processing system failures.

Managing data processing system failures using hidden knowledge from predictive models for failure response generation

Managing devices at an information handling system, including coupling a non-standard device list (SDL) device with an information handling system, the non-SDL device associated with a first communication protocol; establishing a communication channel between the non-SDL device and a remote access controller (RAC) of a private cloud server, the RAC associated with a second communication protocol; identifying a metadata template associated with the non-SDL device, the metadata template indicating one or more parameters associated with the non-SDL device; converting, based on the parameters of the metadata template of the non-SDL device, a request from the second communication protocol to the first communication protocol; and providing, using the first communication protocol, the converted request to the non-SDL device.

Managing non-SDL devices at an information handling system

Systems and methods provide multi-mode validation of modifications to an IHS (Information Handling System) that is factory-provisioned and shipped with hardware capabilities that are not enabled. During factory provisioning of the IHS, two factory-signed certificates are uploaded to the IHS. An inventory certificate identifies factory-installed hardware of the IHS and a capabilities certificate identifies factory-provisioned hardware capabilities of the IHS, such as licensable features of the IHS. Upon deployment of the IHS, multiple validation modes are available. One mode uses the inventory certificate to validate the detected IHS hardware as factory-installed. Another mode uses the capabilities certificate to validate the factory-provisioned hardware capabilities of the IHS that are not enabled. Another mode uses the capabilities certificate to enable a validated factory-provisioned hardware capability of the IHS.

Multi-mode validation of modifications to an IHS

In one or more embodiments, a server may have a remote access controller (RAC) storing a BIOS image. A private cloud server (PCS) communicatively coupled to the RAC may scan the BIOS image. If the BIOS image is compromised, embodiments may access a centralized repository storing information about a plurality of versions of firmware in the server. If there is a previous version with a better performance, a payload for the previous version may be retrieved from a backup service and sent to the RAC. Embodiments may monitor and update a plurality of servers in parallel and rollback to any previous version (N−M) instead of the immediately preceding version (N−1).

System and method for centralizing a repository for virtual deployment

Systems and methods provide multi-modal based updates to firmware utilized by a hardware component of an IHS (Information Handling System), where the firmware updates are managed by a remote access controller of the IHS that provides remote management of the hardware component. The remote access controller receives a notification of an update to an agreement for utilization of the hardware component, where the agreement indicates firmware modes authorized for use by the hardware component. Firmware modes are identified that are locally stored by the hardware component. Any firmware modes are identified that are authorized for use by the hardware component based on the updated first agreement and that are not locally stored by the hardware component, and the identified firmware modes are retrieved for local storage by the hardware component. In this manner, firmware utilized in an IHS remains consistent with applicable service agreements.

Systems and methods for multi-modal firmware updates

Systems and methods update firmware during authentication of a hardware component of an IHS (Information Handling System), where firmware updates are managed by a remote access controller that provides remote management of the IHS. The remote access controller calculates a measurement based on firmware loaded for use by a hardware component of the IHS. Based on the measurement, an integrity of the firmware loaded for use by the hardware component is validated against a reference signature. When the integrity of the firmware is not validated, the hardware component is quarantined. When the integrity of the firmware is successfully validated, the remote access controller determines whether a firmware update is required for the firmware loaded by the hardware component. When a firmware update is required, an integrity of the updated firmware is validated, the updated firmware is loaded by the hardware component and further initialization of the hardware component is allowed.

Systems and methods for updates during firmware authentication

Embodiments of systems and methods to provide a firmware update to multiple storage units configured with different interfaces in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a firmware update image associated with the storage units, and for each of the storage units, identify an update profile based on the type of interface associated with the storage unit, the interface configured to provide communication between the storage unit and the IHS, and perform a firmware update on the storage unit according to the update profile.

Systems and methods for topology aware firmware updates

Methods and systems for managing an interactive user assistance system that provides a rich multimodal content experience for a user are disclosed. In particular, hyperlinks may be included in responses generated for the user's questions to the system. These hyperlinks may take the user to one or more videos or video clips containing content that would assist the user in better resolving the user's questions. The videos or video clips may be stored in a hierarchically managed video clip pool that provides efficient retrieval and association with related content for enhancing the user's access to such multimodal content.

Interactive user assistance system with rich multimodal content experience

Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a target firmware update image associated with a first of the devices, establish a shared memory communication channel with the first device, store the target firmware update image in the shared memory communication channel, and using the shared memory communication channel, perform a firmware update on the first device using the stored target firmware update image.

Systems and methods for use of a firmware update proxy

Systems and methods are provided for validation and enforcement of the use of factory-provisioned environmental restrictions for the operation of certain hardware components of IHSs (Information Handling Systems). During factory provisioning of the IHS, a factory-signed certificate is uploaded to the IHS that identifies the factory-installed hardware of the IHS and any thermal restrictions on that hardware, such as operating temperature boundary requirements for the hardware. Upon deployment of the IHS, validation procedures use an inventory from the certificate to validate the detected IHS hardware as factory-installed. The validation procedures use the thermal restriction from the certificate to confirm the detected IHS hardware is configured to operate within the factory-provisioned thermal restrictions. The thermal restrictions from the certificate are also used to validate relocation of the IHS to different ambient environments.

Validation of environmental restrictions on IHS operations

Systems and methods provide an Information Handling System (IHS) comprising a host processor module configured to host at least one smart device and a secure control module configured to host a Baseboard Management Controller (BMC). The BMC validates identities and determine capabilities of the at least one smart device using Security Protocol and Data Model (SPDM) messages. The BMC sends a network access identity to the at least one smart device using an SPDM message. The BMC receives a request for a network connection from the at least one smart device, wherein the request includes the network access identity. The BMC performs authentication server functions to approve the network connection request. The BMC then sends a message to the at least one smart device indicating that a port or NC-SI channel is authorized for network access.

Secure access via 802.1X port-based network access control (PNAC)

Methods and systems for managing the operation of data processing systems are disclosed. A data processing system may include a computing device that may provide computer implemented services. To provide the computer implemented services, hardware components of the data processing system may need to operate in predetermined manners. To manage the operation of the hardware components, the data processing system may heat them when their temperatures fall outside of thermal operating ranges. To manage the hardware components when heating is unavailable, the data processing system may proactively heat them to elevated goal temperature ahead of periods of time when heating is unavailable.

System and method for managing unavailability of management components

In one or more embodiments, a server may have a server operating system (OS) and a component with a component OS. During a boot process, embodiments may ensure the server OS does not boot until after the component OS boots. During a shutdown process, embodiments may ensure the server OS does not shut down until after the component OS shuts down. In systems with multiple Remote Access Controller, embodiments may synchronize processing between the two RACs.

System and method for boot and shutdown synchronization of server operating system and component operating system

In one or more embodiments, one or more systems may comprise a Remote Access Controller (RAC) configured with a minimum number of built-in features and a private cloud server (PCS) communicatively coupled to the RAC and storing a set of available services retrieved from an external cloud server. The RAC may be configured to communicate with a DHCP service, an onboarding service and a RAC proxy service to send a RAC hardware identity certificate and receive a RAC proxy service certificate. If the RAC hardware identity certificate and the RAC proxy service certificate are authenticated, the RAC proxy service may establish a binding with RAC firmware.

System and method for discovery and binding of remote access controller firmware to a proxy service

Growing community of inventors

Bengaluru, India

Deepaganesh Paulraj