International Business Machines Corporation

Lenovo (singapore) Pte. Ltd.

Nicholas A Ramirez

Mehul M Shah

Raghuswamyreddy Gundam

Douglas R Oliver

Wingcheung Tam

Newton P Liu

Shiva R Dasari

Karthik Kolavasi

A system includes a multi-node chassis including a chassis management module, a plurality of compute nodes, and a physical presence manual actuator for transmitting a physical presence signal to each compute node in response to manual actuation. Each server has a firmware interface, a trusted platform module, and an AND gate. The firmware interface has a general purpose input output pin for providing an enabling signal in response to a user instruction to a firmware interface setup program that communicates with the firmware interface. The AND gate has a first input receiving the enabling signal, a second input receiving the physical presence signal, and an output coupled to the trusted platform module, wherein the AND gate for a selected compute node asserts physical presence to the trusted platform module of the selected compute node in response to receiving both the enabling signal and the physical presence signal.

System with manual actuator for asserting physical presence across multiple compute nodes

A compute node includes a motherboard having a trusted platform module, and also includes a port for selectively coupling a hot pluggable device into communication with the motherboard. The compute node further includes a circuit coupled to the port for detecting a change in the physical connection of the hot pluggable device to the port and for asserting a physical presence signal to the trusted platform module in response to detecting a change in the physical connection of the hot pluggable device to the port. The change in the physical connection of the hot pluggable device to the port may include either physically connecting the hot pluggable device to the port, physically disconnecting the hot pluggable device from the port, or a combination thereof.

Asserting physical presence to a trusted platform module by physically connecting or disconnecting a hot pluggable device

A method includes asserting a physical presence signal to a trusted platform module of a compute node in response to detecting a change in the physical connection of a hot pluggable device to a port of the compute node. The change in the physical connection of the hot pluggable device to the port is selected from physically connecting the hot pluggable device to the port, physically disconnecting the hot pluggable device from the port, and combinations thereof. Optionally, the compute node has a USB port and the hot pluggable device has a USB connector that is selectively physically connectable to the USB port. In one example, detecting a change in the physical connection of the hot pluggable device to the compute node includes detecting a voltage change on the USB port.

A method uses a firmware interface setup program for a selected compute node ('node') to cause a firmware interface to enable a trusted platform module (TPM) on the selected node to receive a physical presence (PP) signal. The selected node is selected from a plurality of nodes within a multi-node chassis, wherein each node includes a firmware interface and a TPM. A device within the multi-node chassis is manually actuated to transmit a PP signal to each of the plurality of nodes, such that each node receives the PP signal. The PP signal is asserted to the TPM of the selected node in response to both enabling the TPM of the selected node to be able to receive the PP signal and receiving the PP signal. Still further, the method allows modification of a security setting of the selected node in response to the TPM receiving the PP signal.

Growing community of inventors

Austin, TX, United States of America

Nicholas A Ramirez