Lenovo (Singapore) Pte. Ltd.

International Business Machines Corporation

Lenovo Global Technology (United States) Inc.

Motorola Mobility LLC

Lenovo Enterprise Solutions (Singapore) Pte. Ltd.

Fred Allison Bower, Iii

Caihong Zhang

Gary David Cudak

Ming Lei

Ajay Dholakia

Gregory Brian Pruett

Scott Edwards Kelso

William Gabriel Pagan

Rodney Hugh Brown

Amit Kumar Agrawal

James Gordon McLean

Olivier David Meirhaeghe

David Bryan Roberts

Richard Edwin Harper

Jeffery J Van Heuklon

Michael H Nolterieke

Thomas James Fox

Ketan K Shah

Tushar Dasharath Fadale

William Gavin Holland

Antonio Abbondanzio

Christopher Landon Wood

Scott Alan Piper

Matthew Robert Alcorn

Jarrod B Johnson

Ye Xu

Jiang Chen

Charles Christian Queen

Paul Theodore Artman

Cale T Rath

David Daniel Chudy

Cristian Medina

Patrick Leo Caporale

CheKim Chhuor

Michael Gerard Demeter

Lu Chen

Daniel J Sorin

James G McLean

Michael T Shelton

Hank Ch Chung

Le Wei Ji

Qiao Neng Qian

Andrew Jack Sloma

Qiu Shuang Cai

Shyam Sareen

Sule Ozev

Paul G Shealy

Zhi Hu Wang

Makoto Ono

Mark Edward Molander

Vinod Kamath

Pravin S Patel

Jian Li

Michael Raymond Miller

Igor Stolbikov

Radu Mihai Iorga

Jonathan Randall Hinkle

Joseph Michael Pennisi

Nikhil Hegde

Corneliu-Ilie Calciu

Bin Zhang

James Joseph Parsonese

Gregory Joseph McKnight

Roberto H Jacob Da Silva

David W Cosby

Jeffrey Ross Hamilton

Wilson Velez

Paul Brian Tippett

Jerry Don Ackaret

Albert Andre Asselin

Kevin S Vernon

Peter Morjan

Sandhya Kapoor

Binqi Zhang

Hank C H Chung

David Joseph Doria

Qian Qiaoneng

Celia Anne Schreiber

Jason M Heim

Shunrong Hu

David Martin Roth

Patricia May Genovese

Ke Cao

Srihari V Angaluri

Hai Jun Xu

Xiao Dong Du

Zhichen Wang

John Scott Harsany

Hussein Jammal

Shyam S Sareen

Dao Quan Yang

Shun Rong Hu

Deepak W Elias

Tony W Offer

Jefferey J Van Heuklon

A method for unlocking a firmware setup utility of a computer server without a firmware setup utility user password. The method includes booting the server to a firmware setup utility interface and receiving a user request to unlock the firmware setup utility without the password. The method further includes receiving, via a web interface to a baseboard management controller (BMC) of the server, login credentials for accessing a BMC configuration, wherein the login credentials are authenticated by the BMC. The firmware setup utility causes, in response to the request, the BMC to send a nonce code to a registered destination address stored by the BMC. User input containing the nonce code is received through the web interface to the BMC, and the firmware setup utility is unlocked in response to determining that the nonce code received through the BMC web interface matches the nonce code in the message.

Unlocking a locked firmware setup utility using multi-factor authentication supported by a baseboard management controller

A method includes a node detecting that a service event has occurred within the node, wherein the node is located within an air-gapped computing system that includes a plurality of nodes, and wherein there is no wired communication connection between any device within the air-gapped computing system and any device outside the air-gapped computing system. The method further includes a wireless transceiver located within the air-gapped computing system transmitting a service report in a short-range wireless communication signal that extends beyond the air-gapped computing system, wherein the service report identifies the service event detected by the node. Still further, the method includes a relay device located outside the air-gapped computing system receiving the short-range wireless communication signal that includes the service report, and the relay device forwarding the service report to a destination node located outside the air-gapped computing system.

Transmitting a service report from an air-gapped computing system

Methods of boot process monitoring include receiving, by a service processor, a notice that a boot process for a server has started, monitoring a video buffer of a console of the server, and identifying, based on the monitoring, a potential error in the boot process.

Boot process monitoring

A computer program product, a method and a baseboard management controller for performing the operations of computer program product or method. The operations include identifying a current utilization level of the processor of the baseboard management controller, obtaining hardware performance data for hardware devices installed in a server that includes the baseboard management controller, running an application program that performs hardware failure prediction, and controlling an amount of the hardware performance data that is used by the application program to perform the hardware failure prediction, wherein the amount of the hardware performance data is controlled as a function of the current utilization level of the processor.

Controlling an amount of data used by a baseboard management conroller to perform hardware failure prediction

A computer program product and computer-implemented method include operations including identifying a software update payload that is available for distribution and identifying compatibility data for the software update payload, wherein the compatibility data identifies configurations of a computing device that are compatible with the software update payload. The operations further include forming an update package that includes the software update payload and the compatibility data, digitally signing the update package, and providing the signed update package to one or more computing devices over a network. A computing device receiving the signed update package may authenticate the signed update package, verify the package has not experienced an unauthorized modification, access the compatibility data, determine whether the compatibility data indicates that the software update payload is compatible with the configuration of the computing device, and use the software update payload to update the computing device in response to a determination of compatibility.

Signed update package including a software update payload and compatibility data

A computer program product includes a non-transitory computer readable medium and program instructions embodied therein. An apparatus includes a non-transitory data storage device storing program instructions and at least one processor configured to process the program instructions. The program instructions are configured to, when processed by the at least one processor, cause the apparatus to perform various operations. The operations may include monitoring a tamper-detection sensor of an edge device, wherein the edge device performs a tamper-prevention operation in response to an output signal from the tamper-detection sensor. The operations may further include detecting entry of an authorized person into a facility where the edge device is located and automatically sending a disabling instruction to the edge device to cause the edge device to temporarily disable the tamper-prevention operation of the edge device in response to detecting entry of the authorized person into the facility.

Disabling a tamper-prevention operation of an edge device in response to detection of an authorized person

A computer program product includes program instructions configured to be executable by a processor of a networking hardware device to cause the processor to perform various operations. The operations include monitoring network communications on a first port of the networking hardware device to identify a first network address of a first device attached to the first local port and determining that the first network address is incompatible with communication on an external network. The operations further include automatically configuring, in response to determining that the first network address is incompatible with communication on an external network, independent network address translation for the first local port to translate the incompatible first network address to a compatible network address for all egress traffic from the first device and to translate the compatible network address to the incompatible first network address for all ingress traffic to the first device.

Automatic configuration of network address translation for devices having an incompatible network address

A method for allowing a firmware update when a digital certificate for a firmware update image is expired includes initiating a firmware update of a computing device and determining, using a secure boot process, that a firmware update image has an expired digital certificate. The firmware update image is stored in nonvolatile memory accessible to a service processor and to a host processor of the computing device. The method includes determining that the firmware update image and an image of firmware with code of the secure boot process were digitally signed by a same entity and overriding the secure boot process to allow execution of the firmware update image in response to determining that the firmware update image and the image of the firmware with code of the secure boot process were digitally signed by a same entity.

System to enable secure boot from expired certificate via digital signature proxy

A replacement node replaces a failed node and a baseboard management controller (BMC) for the replacement node generates a nonce code that is accessible to an authenticated user. An edge management node receives the nonce code from the user and sends a maintenance token to a BMC of a peer node in an edge cluster, wherein the peer nodes BMCs within the cluster are in a BMC federation that included the failed node BMC and have access to a BMC configuration for the failed node. The management node sends the token and the nonce code to the replacement node BMC for authentication of the token. The peer node BMC sends the token received from the management node to the replacement node BMC for authentication of the peer node BMC. The authenticated peer node BMC may then deploy the BMC configuration to the replacement node BMC.

Configuring a replacement node using a configuration backup of a failed node being replaced

In aspects of adaptive grip suppression, a wireless device has a display screen with curved display edges to display a user interface associated with a device application, the user interface including a selectable element to initiate a device application action. The wireless device implements an adaptive control module to adaptively manage grip suppression in the curved display edges of the display screen, which limits the device application action from being initiated based on inadvertent touch inputs on the selectable element. The adaptive control module can determine that the selectable element of the user interface is displayed within a region of a curved display edge of the display screen, and decrease the grip suppression in the region of the curved display edge proximate the selectable element of the user interface.

Adaptive grip suppression within curved display edges

A computer program product includes program instructions configured for execution by a processor to perform various operations. The operations include accessing a system resource database including, for each of a plurality of disaggregated computing hardware resources within a composable computing system, hardware characteristics that describe the disaggregated computing hardware resource, wherein the hardware characteristics include a physical location of the disaggregated computing hardware resource. The operations further include identifying a first workload request that requests performance of a first workload, identifying a physical location requirement for the first workload, selecting a subset of the disaggregated computing hardware resources to be included in a first computing subsystem for performance of the first workload in compliance with the physical location requirement for the first workload, provisioning of the first computing subsystem, and assigning the first computing subsystem to perform the first workload.

Provisioning a computing subsystem with disaggregated computing hardware resources selected in compliance with a physical location requirement of a workload

An computing device for dual-access high-performance storage for BMC to host data sharing includes a storage device, a host input/output ('IO') domain hardware, a BMC that includes an external data connection, and a switch that includes a connection to the host IO domain hardware, a connection to the storage device, a connection to a root port in the BMC, and a connection to an end point port of the BMC. The switch is configured to connect the host IO domain hardware to the end point port of the BMC and configured to alternately connect the root port of the BMC to the storage device while uploading data from the external data connection to the storage device, and the host IO domain hardware to the storage device to permit the host IO domain hardware to access to the data uploaded from the external data connection.

Dual-access high-performance storage for BMC to host data sharing

A method for automatic systems devices rediscovery includes creating a hardware map of hardware components of a computing system at a time when each of the hardware components of the computing system is discoverable. The method includes determining discoverability of each hardware component in the hardware map at a point in time after creation of the hardware map, and in response to determining that a hardware component listed in the hardware map is not discoverable, initiating a reset of the hardware component.

Automatic systems devices rediscovery

A computer program product may cause a processor to perform various operations in a composable computing system. The operations may include accessing a system resource database including, for each of a plurality of disaggregated computing hardware resources within the composable computing system, data corresponding to hardware characteristics for the hardware resource and a power domain characteristic of a power domain that supplies power to the hardware resource. The operations may further include identifying a workload request that requests performance of a workload and identifying a power domain requirement for the workload. Still further, the operations may include selecting a subset of the disaggregated computing hardware resources to be included in a first computing subsystem, wherein each hardware resource selected to be included in the first computing subsystem complies with the identified power domain requirement for the workload, provisioning of the first computing subsystem, and assigning the first computing subsystem to perform the workload.

Provisioning a computing subsystem including disaggregated hardware resources that comply with a power domain requirement for a workload

A method for virtual on-demand internet connectivity for management controllers is disclosed. The method includes starting, on a management controller of a computing device connected to a management network, a management session in response to a valid login request from an authorized system administrator computer. The method includes, after startup of the management session, establishing a proxy in a browser of a device with a connection to a public network. The proxy enables the management controller to send one or more internet requests through the proxy using the connection to the public network. The method includes providing information to the system administrator computer. The provided information includes information received by the management controller in response to the one or more internet requests.

Virtual on-demand internet connectivity for management controllers

Growing community of inventors

Durham, NC, United States of America

Fred Allison Bower, Iii