Dell Products Inc.

Emc IP Holding Company LLC

Michael G Varteresian

Muzhar S Khokhar

Wenfeng Li

Charles S Langley

Donald Mace

Haijun Zhong

Jun Wu

Haitao Zhou

Peter Beale

Yourong Wang

Jian Liu

Eric Wu

Stéphane Meng

Chen Liang

Sooraj Nair

Ankur Kasliwal

Jyothi Madallapalli

Shaojuan Lin

Eric O'callaghan

An information handling system may include at least one processor and a memory. The information handling system may be configured to: receive, from a cloud management portal, a request to execute a management task, wherein the request includes information regarding a cloud identity associated with the request; determine a local identity that corresponds to the cloud identity; determine whether the local identity has sufficient privileges to execute the management task; and in response to a determination that the local identity does have sufficient privileges to execute the management task, cause the management task to be executed.

Role-based access control for cloud features

An information handling system may include at least one processor and a memory. The information handling system may be configured to: store a cryptographic lockbox that is secured by a set of secrets and that is accessible from a virtual machine, wherein the set of secrets comprises a first subset of one or more secrets based on a hardware environment of the information handling system and a second subset of one or more secrets based on a virtualized environment associated with the virtual machine; migrate the virtual machine to a different information handling system, wherein the migration is configured not to alter the second subset; and access the cryptographic lockbox from the migrated virtual machine.

Securing data for dynamic environment

Disclosed methods and systems for managing on-premises information handling resources establish, by an in-cloud web portal, an agentless connection to an on-premises information handling resource and perform, via the agentless connection, a configuration management operation to modify a configuration of the on-premises handling resource. Establishing the agentless connection and performing the configuration management operation may include one or more appropriate API calls. Disclosed teachings enable a web-accessible, public cloud portal to perform active configuration management of on-premises resources scattered across any number of distinct and potentially isolated customer sites without deploying and maintaining management agent software within the customer's private cloud. The on-premises resources may include a multi-node cluster provided by a node or nodes of one or more HCI appliances.

Centralized and agentless in-cloud management of on-premises resources

An information handling system may include at least one processor and a memory. The information handling system may be configured to determine names for a plurality of other information handling systems that are on-premises at a particular datacenter having a local network associated therewith; poll a selected subset of the plurality of other information handling systems via the local network; based on results of the polling, determine whether the information handling system is on-premises at the particular datacenter; and in response to a determination that the information handling system is on-premises at the particular datacenter, enable access to at least one sensitive administration operation associated with the particular datacenter.

Detection of on-premises systems

Methods and systems disclosed herein extend an entity's private cloud security model to the entity's public cloud. Public cloud access permissions are defined, in accordance with a security model implemented in the entity's private cloud, for one or more of the entity's public cloud resources. The public cloud permissions are pushed or otherwise provided to an access module within the private cloud. Upon receiving a request to access a public cloud resource, the private cloud access module is invoked to grant or deny the access request in accordance with the public cloud access permissions. Similarly, upon receiving a request to access a private cloud resource, the private cloud access module is invoked to process the access request in accordance with private cloud access permissions, thereby beneficially enabling users to interact with a single access interface regardless of whether the resource reside within the entity's cloud platform.

Extending private cloud security model to public cloud

A disclosed method for managing access control in cloud based environment with on-premises and off-premises access portals includes storing account mapping information, indicative of an association between on-premises accounts off-premises accounts, to a lockbox in each of the plurality of clusters and deploying an off-premises agent in each of the clusters. One or more of the clusters may exist within a hyper-converged infrastructure system. Each off-premises agent may be configured to retrieve cluster access information indicative of access permissions for the on-premises node cluster and upload the cluster access information to an off-premises access control service. The access permissions for the on-premises cluster and the off-premises access permissions may comprise role based access permissions. The off-premises access control service is coupled to an off-premises portal and enables the off-premises portal to switch its access control permissions between on-premises access permissions and off-premises permissions in accordance with the targeted resource.

Managing on-premises and off-premises access control

A method, computer program product, and computing system for generating a tagged telemetry data portion concerning a storage system. The tagged telemetry data is processed via one or more heath check microservices to generate one or more tagged health packets. The one or more tagged health packets are processed via one or more health awareness microservices to generate one or more health awareness results.

Analysis system and method

A method, computer program product, and computing system for receiving usage and configuration data from a storage system. The usage and configuration data is compared to one or more best practice models to determine one or more recommendations. The one or more recommendations are provided to a user of the storage system.

Best practice system and method

A method, computer program product, and computing system for receiving temporal telemetry data portions concerning one or more elements of a storage system. A health score is assigned to the temporal telemetry data portions and a reliability score is assigned to the health score.

A method, computer program product, and computing system for receiving telemetry data from a remote storage system. The telemetry data is analyzed to assign a system health score to the remote storage system.

Automated analysis system and method

Described are methods, systems, and apparatus, including computer program products for generating a computer-executable script for processing storage system data files. Storage system data files are selected based on data structure description files, and computer-executable statements are generated for loading the selected files into storage system data tables. Storage system data fields are selected from the tables based on data structure description files, and computer-executable statements are generated for filtering the tables based on the selected fields. A join sequence is determined based on properties of the filtered tables, and computer-executable statements are generated for joining the filtered tables based on the join sequence. The joined table is formatted based on data structure description files, and computer-executable statements are generated for creating an output based on the formatted joined table. A computer-executable script is generated based on the computer-executable statements, and is committed to a file system.

Automated script generator for processing storage system data files

A method, computer program product, and computing system for receiving telemetry data from a remote storage system. The remote storage system includes a plurality of subsystems. The telemetry data is analyzed to assign a subsystem health score to each of the plurality of subsystems, thus defining a plurality of subsystem health scores. A system health score is assigned to the remote storage system based, at least in part, upon each of the subsystem health scores.

Growing community of inventors

Lexington, MA, United States of America

Michael G Varteresian