International Business Machines Corporation

Erez Alexander Theodorou

Amalia Avraham

Ran Harel

Ohad Atia

Shay Berman

Lior Tamary

Miron Aloni

Ariel Kass

Eran Tzabari

Amelia Avraham

A method according to one embodiment includes sending, from a first system to a second system, a request for a clock value associated with a third system; receiving, from the second system, a clock value associated with the third system and a query clock value determined at the second system; comparing, at the first system, the clock value associated with the third system to the query clock value determined at the second system; determining an amount of time since the third system contacted the second system, in response to determining that the query clock value is greater than the clock value associated with the third system; comparing the difference to a threshold time; determining that the third system is unavailable when the difference exceeds the predetermined threshold time value; and performing one or more predetermined actions at the first system in response to determining that the third system is unavailable.

Identifying an availability of a system

Embodiments herein describe providing a certificate signed by a local CA to an unauthenticated server rather than obtaining a certificated signed by a third-party CA. A server that already has a certificate that was signed by a third-party CA may want to establish secure connection with an unauthenticated server which does not have a signed certificate. The unauthenticated server needs a certificate signed by a CA trusted by the server that already has a signed certificate (referred to herein as the authenticated server). To do so, the unauthenticated server sends login credentials to the authenticated server so that this server knows it can trust the unauthenticated server. In turn, the authenticated server can send its signed certificate to the unauthenticated server so it can verify the authenticated server. Once verified, the authenticated server generates a signed certificate for the unauthenticated server using a local CA.

Server/server certificates exchange flow

Methods, computing systems and computer program products implement embodiments of the present invention that include defining multiple storage capabilities for a set of storage resources in multiple storage systems, the storage resources including storage space, and identifying two of the storage systems including one or more storage capabilities required by a first logical volume. A first given identified storage system is configured to store the first logical volume, and a second given identified storage system is configured to store a second logical volume, the second given storage system different from the first given storage system. Upon storing data to the first logical volume, the data can be mirrored to the second logical volume. In some embodiments, a software defined storage system can be configured including defined services, wherein the first given storage system includes a first given service, and wherein the second given storage system includes a second given service.

Storage mirroring decision by capability sets

A computer-implemented method according to one embodiment includes sending, from a first system to a second system, a request for a clock value associated with a third system, receiving, from the second system, a clock value associated with the third system and a query clock value determined at the second system, comparing, at the first system, the clock value associated with the third system to the query clock value determined at the second system to determine whether the third system is unavailable, and performing one or more predetermined actions at the first system in response to determining that the third system is unavailable.

Growing community of inventors

Petah Tikva, Israel

Erez Alexander Theodorou