Hewlett Packard Enterprise Development LP

Hewlett-packard Development Company, L.P.

Compaq Information Technologies Group, L.p.

Simdesk Technologies, Inc.

Justin E York

Kenneth C Duisenberg

Thomas Hanson

Peter A Hansen

Geoffery Schunicht

Michael Stearns

Brian Collum

Bharath Ramesh

Andrew Brown

Chanh V Hua

Charles W Cochran

Timothy Majni

Darrin S Rawls

Jerry R Newman

Jeffrey Sung

Tony Isaac

Examples described herein relate to a system and method for managing the security of an edge enclosure. The edge enclosure is deployed in a mobile environment and travels between a base location and a task location to perform a task. The task is defined and configured at a chassis manager by a management device. A server in the edge enclosure processes data associated with the task. The chassis manager detects a loss of communication between the chassis manager and the management device. The chassis manager performs a security action based on task status. The task status is either ongoing or completed. The security action performed at the edge enclosure protects the data present in the server from tampering. The management device transmits alerts to the customers of the edge enclosure after the task is completed.

Managing security of enclosure based on a task status and geographical location of the enclosure

Examples to restore a trusted backup configuration for a node. Example techniques include failover to an alternate firmware of the node, in response to an unverifiable condition of an existing firmware of the node. The node may validate a first configuration file stored in the node. The first configuration file includes a first backup configuration. The node may validate a second configuration file stored in the node based on the validation of the first configuration file. The second configuration file includes a second backup configuration. In response to the validation of at least one of the first configuration file and the second configuration file, the node may select one of the first backup configuration and the second backup configuration, and apply the selected backup configuration to the node.

Applying trusted backup configuration to a node

Examples described herein relate to a method for managing hardware changes at an enclosure and a server. The enclosure includes a server and multiple hardware devices connected to the enclosure. A chassis manager in the enclosure is communicatively coupled to a manageability controller of the server and the multiple hardware devices. On enabling tamper detection, the manageability controller and the chassis manager monitor the hardware devices for determining changes in the hardware devices. A change in a hardware device is compared with a permissible hardware change to determine whether the change in the hardware device is unauthorized. The permissible hardware changes include changes in hardware devices that are permitted by a customer. Security actions are performed at the server and the enclosure if unauthorized changes in the hardware device are detected by the manageability controller and chassis manager.

Systems and methods provide a transient component limited access to data in a composition. One method includes receiving a request for the transient component to access data in the composition. The composition may include permanent components operable to utilize encryption keys generated at selected intervals from a seed value shared by the permanent components. The encryption keys utilized by the permanent components at each selected interval may be identical to one another. The method also includes generating a set of encryption keys from the seed value for a specified period of time. The set of encryption keys may be identical to the encryption keys to be utilized by the permanent components at the selected intervals to occur during the specified period of time. The method further includes granting the transient component access to data in the composition for the specified period of time via the set of encryption keys.

Data access management for a composition

Examples disclosed herein relate to power management in a blade enclosure. An intrusion detection mode is initiated by a baseboard management controller. Responsive to determining a power shortage in the blade enclosure, a stop clock pin is operated to control power consumption of a server in the blade enclosure. After a predefined time of determining the power shortage, a model specific register (MSR) associated with power settings of a Central processing unit (CPU) of the server is reconfigured. Reconfiguring the MSR comprises, identifying a power profile based on available power in the blade enclosure and modifying register states in the MSR based on the power profile via a baseboard management manager (BMC) of the server. Subsequently, operation of the stop clock pin is stopped.

Power management in a blade enclosure

In some examples, a system includes a first processor, a second processor, and a storage medium to store first information comprising machine-readable instructions executable by the second processor. The first processor is to validate the machine-readable instructions using an iterative validation process involving a plurality of iterations at different times, where each respective iteration of the plurality of iterations includes issuing a respective indication to the second processor to compute a value based on a respective subset of the first information, wherein the respective indication includes respective subset information identifying the respective subset, wherein the respective subset information differs from different subset information included in another indication issued in another iteration of the plurality of iterations, the different subset information identifies a different subset of the first information. Each iteration further includes determining a validity of the machine-readable instructions based on the value returned to the first processor by the second processor.

Validating machine-readable instructions using an iterative validation process

Examples disclosed herein relate to initializing a fan speed of a computing device using a high-water value when a pre-runtime event occurs. A management controller (MC) receives sensor data from sensors of the computing device. A fan speed of a fan is controlled using a fan control value based on the sensor data. The fan control value is monitored to determine a high-water value of the fan control value. The high-water value is stored in a location that is accessible by a pre-runtime fan control engine of the computing device. In response to a pre-runtime event, the fan speed is initialized to a speed using the high-water value.

Pre-runtime fan control

A management processor includes a peripheral identifier to identify a peripheral device installed in a computing device. The management processor also includes a code retriever to receive management code from the peripheral device. The management processor also includes a code executor to execute the management code to provide, at the management processor, a management application programming interface (API) accessible by a remote client to manage the peripheral device, the remote client being external to the management processor.

Management processor using code from peripheral device

A slot-based component provides remote serial console and KVM capability to all slots in a sled by allocating dedicated memory space in a serial console component for serial console and KVM data. The dedicated memory space is in communication with a memory semantic fabric switch that is in communication all slots on the fabric. Other components on the fabric have corresponding allocated memory in communication with onboard CPU's. When remote access is conducted the CPU receives and pushes data to the allocated memory and the data is pulled through the fabric switch to the serial console component to be provided to a remote client session.

Composable serial console and KVM with remote accessibility

Techniques to inspect packets to determine a destination node are provided. In one aspect, a Wake on Lan (WOL) packet may be received at a switch. A destination node of the WOL packet may be determined. An indication of the determined destination node may be sent to a management controller. The management controller may cause the destination node to awaken.

Packet inspection to determine destination node

Various examples described herein provide for monitoring a peripheral device by data imported from the peripheral device. The peripheral data may comprise a script associated with monitoring or managing the peripheral device, or descriptive data describing a set of monitor values on the peripheral device.

Monitor peripheral device based on imported data

Example implementations relate to serving an image to a group of target servers. An example implementation includes assigning a first target server of a group of target servers as a temporary deployment server. The first target server may be assigned as a temporary deployment server by a master deployment server over a management network. The master deployment server may serve the first target server an image package. The master deployment server may further serve a command over the management network to a second target server of the group of target servers. The second target server may be commanded to retrieve, over a data network, a deployment image of the image to be booted on the second target server.

Serving images to server groups

Various examples described herein provide for a management processor that reads a registration script from a peripheral device, and uses the script to act in proxy to register the peripheral device as a data provider on the management processor. Once a peripheral device is registered as a data provider on the management processor, the management processor can permit the peripheral device to host a management resource on the management processor. By accessing the hosted management resource through the management processor, a client can manage, monitor, or control the peripheral device.

Management processor executing peripheral device registration script

A computing device including an AUX (auxiliary) power controller connected to the expansion slot to supply aux power to the expansion slot intermittently based on instructions from a baseboard management controllers (BMC).

Growing community of inventors

Houston, TX, United States of America

Justin E York