Dell Products Inc.

Krishnaprasad K

Viswanath Ponnuru

Gobind Vijayakumar

Shiva Prasad Katta

Chandrashekar Nelogal

Rama Rao Bisa

Chandrasekhar Mugunda

Shinose Abdul Rahiman

Dharma Bhushan Ramaiah

Vineeth Radhakrishnan

Kiran Kumar Devarapalli

Vinod P S

Murugan Sekar

Mahesh Vellore Chandramouli

An Information Handling System (IHS) includes multiple hardware devices, and a baseboard Management Controller (BMC) in communication with the plurality of hardware devices. The BMC includes executable instructions for monitoring the operating characteristics a hardware device that is operating in a fixed pass-through configuration with a workspace in which the workspace has been instantiated by a workspace orchestration service executed on the IHS. The executable instructions may determine that the operating characteristics are indicative of a security breach of the fixed pass-through configuration, and as such, may perform an operation to quarantine the one hardware device when the fixed pass-through configuration is determined to possess the security breach.

Workspace-based fixed pass-through monitoring system and method for hardware devices using a baseboard management controller (BMC)

A node for a VSAN includes a BMC, a processor, and a plurality of VSAN objects. The processor instantiates a Cluster Membership, Monitoring, and Directory Service (CMMDS) and a BMC Service Module (SM). The CMMDS implements a Security Policy and Data Model (SPDM) architecture. The CMMDS determines an inventory list of the VSAN objects and a SPDM authentication state for each of the objects, and provides the inventory list and the SPDM authentication states to the BMC SM. The BMC SM provides the inventory list and the SPDM authentication state to the BMC. The BMC determines that a first VSAN object is not authenticated based upon the SPDM authentication state of the first VSAN object, and directs the CMMDS to halt input/output (I/O) operations on the VSAN to the first VSAN object.

Secure VSAN cluster using device authentication and integrity measurements

An information handling system may include a persistent memory module and a basic input/output system (BIOS). The information handling system may be configured to: prior to initialization of an operating system, receive, at a configuration application of the BIOS, configuration information regarding the persistent memory module; in response to the configuration information, allocate a first portion of the persistent memory module to volatile system memory of the information handling system, a second portion of the persistent memory module to non-volatile storage of the information handling system, and a third portion of the persistent memory module to a dynamic memory area; and after initialization of the operating system, execute a memory manager configured to alter sizes of the first portion, the second portion, and the third portion, wherein the altering is carried out without performing a reboot of the information handling system.

Dynamic memory allocation based on workload characterization and optimization

An information handling system may include at least one processor; and a memory coupled to the at least one processor. The information handling system may be configured to: execute an application on the at least one processor, wherein at least a portion of data of the application is stored encrypted in a secure enclave region of the memory; and securely transfer execution of the application to a second information handling system by: transmitting platform configuration register (PCR) measurement data to the second information handling system; and transmitting the data of the application to the second information handling system; wherein the PCR measurement data is usable by the second information handling system to perform a remote attestation, the remote attestation including verification of the PCR measurement data to confirm that the data of the application has not been changed.

Protection of a secured application in a cluster

A method for allocating virtual machines (VMs) to run within a non-uniform memory access (NUMA) system includes a first processing node and a second processing node. A request is received at the first processing node for additional capacity for at least one of (a) establishing an additional VM and (b) increasing processing resources to an existing VM on the first processing node. In response to receiving the request, a migration manager identifies whether the first processing node has the additional capacity requested. In response to identifying that the first processing node does not have the additional capacity requested, at least one VM is selected from an ordered array of the multiple VMs executing on the first processing node. The selected VM has low processor and memory usage relative to the other VMs. The selected VM is migrated from the first processing node to the second processing node for execution.

Method of migrating virtual machines between non-uniform memory access nodes within an information handling system

In one embodiment, a system includes a device and first and second processors. The first and second processors are configured to access first information. The first information includes a first parameter and a second parameter. The first parameter is associated with a position of the device relative to the first processor. The second parameter is associated with a position of the device relative to the second processor. The system is configured to access second information associated with a virtual machine. The virtual machine is configured to run on a host operating system. The virtual machine includes a guest operating system configured to communicate with the device. The system is also configured to automatically select the first processor based at least on the first information and the second information and to associate the virtual machine with the first processor in response to automatically selecting the first processor.

Growing community of inventors

Bengaluru, India

Krishnaprasad K