Dell Products Inc.

Rama Rao Bisa

Chitrak Gupta

Shinose Abdul Rahiman

Dharma Bhushan Ramaiah

Vineeth Radhakrishnan

Pavan Kumar Gavvala

Chandrashekar Nelogal

Elie Antoun Jreij

Viswanath Ponnuru

Sushma Basavarajaiah

Deepaganesh Paulraj

Mini Thottunkal Thankappan

Chandrasekhar Mugunda

Kala Sampathkumar

Mukund Purshottam Khatri

Manjunath Am

Rajeshkumar Ichchhubhai Patel

Manjunath Vishwanath

Mahesh Babu Ramaiah

Naveen Karthick Chandrasekaran

Akkiah Choudary Maddukuri

Johan Rahardjo

Lee Eric Ballard

Chandrasekhar Puthillathe

Nikhith Ganigarakoppal Kantharaju

Sumalatha Pagadala

Komal Kumar Dhote

Darshan Hebbar

Isaac Qin Wang

John Ross Palmer

Sanjeev Dambal

Pablo Rafael Arias

Choudary Maddukuri

Jeremiah James Bartlett

Chandrasekhar R

Ajeesh Kumar

Sushmitha Naik

Shantanu Kumar Pradhan

Suresh Vijaykumar

Prasanna Kumar Sahoo

Shekar Babu Suryanarayana

Kevin Warren Mundt

Vaideeswaran Ganesan

Dinesh Kunnathur Ragupathi

Wade Andrew Butcher

Mainak Roy

Arun Muthaiyan

Syama Poluri

Robert G Bassman

Sanjay Rao

Robert Talbott Stevens, Iv

Pavan Kumar

Jitendra Kumar

Harmeet Singh

Neeraj Joshi

Balamurugan Gnanasambandam

Ajay Shenoy

Vigneswaran Ponnusamy

Satyajit Dipakbhai Desai

Sivakami Velusamy

Krishnaprasad K

Charles D Stracener

Santosh Kumar Sahu

Hiren Kishorbhai Pitroda

Diwahar Natarajan

Christopher Domingo Arzola

Pallavi Satpathy

Sunil Lingappa

Ajaya K Senapati

Pravin Velumani

Vineeth Radharisknan

Abhishek Ramachandra Manganawar

Chandrasekhar Puthilathe

Andre James Dumouchelle

Mohan Murali Gurram

Prakash Balasaheb Pawar

Systems and methods provide multi-modal based updates to firmware utilized by a hardware component of an IHS (Information Handling System), where the firmware updates are managed by a remote access controller of the IHS that provides remote management of the hardware component. The remote access controller receives a notification of an update to an agreement for utilization of the hardware component, where the agreement indicates firmware modes authorized for use by the hardware component. Firmware modes are identified that are locally stored by the hardware component. Any firmware modes are identified that are authorized for use by the hardware component based on the updated first agreement and that are not locally stored by the hardware component, and the identified firmware modes are retrieved for local storage by the hardware component. In this manner, firmware utilized in an IHS remains consistent with applicable service agreements.

Systems and methods for multi-modal firmware updates

Systems and methods update firmware during authentication of a hardware component of an IHS (Information Handling System), where firmware updates are managed by a remote access controller that provides remote management of the IHS. The remote access controller calculates a measurement based on firmware loaded for use by a hardware component of the IHS. Based on the measurement, an integrity of the firmware loaded for use by the hardware component is validated against a reference signature. When the integrity of the firmware is not validated, the hardware component is quarantined. When the integrity of the firmware is successfully validated, the remote access controller determines whether a firmware update is required for the firmware loaded by the hardware component. When a firmware update is required, an integrity of the updated firmware is validated, the updated firmware is loaded by the hardware component and further initialization of the hardware component is allowed.

Systems and methods for updates during firmware authentication

According to embodiments of the present disclosure, systems and methods to advertise Security Protocol and Data Model (SPDM) command timing requirements are provided. According to one embodiment, an Information Handling System (IHS) includes a requester and a responder conforming to a SPDM specification in which the responder is configured with computer-executable logic to, in response to a request from a requester, generate an estimated amount of time to process a SPDM command, and send the estimated amount of time to the requester in response to the request. The requester may then wait the estimated amount of time between sending each of multiple ensuing commands to the responder.

Systems and methods to advertise SPDM command timing requirements

According to embodiments of the present disclosure, a Security Protocol and Data Model (SPDM)-enabled device uses a device identity to provide, among other things, a SPDM-based firmware protection system and method that, upon execution by computer-readable instructions, receive, from a requesting device, a request to update the SPDM-enabled device with a software package, and obtain the software package from an online portal. The computer-readable instructions further encrypt the software package with an encryption key, encrypt the encryption key with a device identity certificate of the requesting device, and send the encrypted software package and encrypted encryption key to the requesting device.

SPDM-based firmware protection system and method

Embodiments of systems and methods to provide a firmware update to multiple storage units configured with different interfaces in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a firmware update image associated with the storage units, and for each of the storage units, identify an update profile based on the type of interface associated with the storage unit, the interface configured to provide communication between the storage unit and the IHS, and perform a firmware update on the storage unit according to the update profile.

Systems and methods for topology aware firmware updates

Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a target firmware update image associated with a first of the devices, establish a shared memory communication channel with the first device, store the target firmware update image in the shared memory communication channel, and using the shared memory communication channel, perform a firmware update on the first device using the stored target firmware update image.

Systems and methods for use of a firmware update proxy

Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a firmware update image associated with the firmware device, determine that the firmware update image possesses a critical sub-image portion, and schedule a firmware update to be performed in the future on the firmware device using the one firmware update image. The firmware update image conforms to a Platform Level Data Model (PLDM) protocol that is configured to perform rebootless firmware updates.

Systems and methods for supporting rebootless firmware updates

Systems and methods provide for SPDM-enabled devices that conform to an SPDM specification. An SPDM-enabled device receives a request to provision a certificate chain on the device and sends an event notification message to a baseboard management controller. The event notification message indicates receipt of a request to provision a certificate chain in a slot on the SPDM-enabled device. The baseboard management controller evaluates the certificate chain against the device manufacturer's certificate profile policy. If the certificate chain is valid, then a validation successful message is sent to the SPDM-enabled device, which in turn sends a certificate provision response to a requesting device. If the certificate chain is not valid, then a validation failure message is sent to the SPDM-enabled device, which causes the SPDM-enabled device to enter a quarantine state.

Trusted and validated platform device certificate provisioning using security protocol data model (SPDM)

An Information Handling System (IHS) includes multiple hardware devices, and a baseboard Management Controller (BMC) in communication with the plurality of hardware devices. The BMC includes executable instructions for monitoring the operating characteristics a hardware device that is operating in a fixed pass-through configuration with a workspace in which the workspace has been instantiated by a workspace orchestration service executed on the IHS. The executable instructions may determine that the operating characteristics are indicative of a security breach of the fixed pass-through configuration, and as such, may perform an operation to quarantine the one hardware device when the fixed pass-through configuration is determined to possess the security breach.

Workspace-based fixed pass-through monitoring system and method for hardware devices using a baseboard management controller (BMC)

Embodiments of the present disclosure provide a firmware update to multiple, similar hardware devices in an Information Handling System (IHS). In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a request to perform a firmware update to a plurality of devices, update a first of the plurality of devices with the requested firmware update, and calculate a health score for the first device as a result of the first device being updated. Based upon the health score, the system and method may determine whether to update the other devices based at least in part, on the determined health score, and update the other devices based on the determination.

Systems and methods for performing health score-based firmware updates

Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include first and second Remote Access Controllers (RACs) that each includes computer-executable instructions to receive, by the first RAC, a firmware update image associated with the firmware device, and commence transfer of the firmware update image to the firmware device to perform a firmware update on the firmware device using an update mode that restricts another update request to the firmware device until the first RAC finishes or cancels the firmware update. When the transfer is halted prior to completion, the program instructions cause the second RAC to determine where the firmware update image transfer was halted, and commence transferring the remainder of the firmware update image that has not yet been transferred to the firmware device.

Systems and methods for coordinated firmware update using multiple remote access controllers

According to embodiments of the present disclosure, an Information Handling System (IHS) includes a plurality of Security Protocol and Data Model (SPDM)-enabled devices conforming to a SPDM specification, and instructions stored in a memory and executable by a processor to communicate with the SPDM-enabled devices to derive a trust score for each of the SPDM-enabled devices, and perform one or more optimization actions to optimize an overall security state of the IHS.

Systems and methods for security state optimization of SPDM-enabled devices

Systems and methods provide one or more host processor modules configured to host SPDM-enabled hardware devices, and a secure control module configured to host two or more baseboard management controllers. Each of the baseboard management controllers are configured to discover the SPDM-enabled hardware devices using SPDM messages, negotiate with at least one other baseboard management controller for access to individual ones of the SPDM-enabled hardware devices, and manage selected ones of the SPDM-enabled hardware devices.

System-level service discovery in a multi-baseboard management controller (BMC) environment

According to embodiments of the present disclosure, systems and methods to provide pre-deployment assessment for device integrity are disclosed. The pre-deployment assessment systems and methods include computer-executable instructions to identify a Security Protocol and Data Model (SPDM)-enabled device conforming to a SPDM specification, obtain one or more identifying parameters and one or more critical parameters from the SPDM-enabled device, and communicate with a server to obtain information about the SPDM-enabled device without sending any critical information to the server. The instructions then determine whether the SPDM-enabled device is authorized for use in the IHS by comparing the identifying parameters with the information obtained from the server, and when the SPDM-enabled device is authorized for use with the IHS, send the critical parameters to the server. However, when the SPDM-enabled device is not authorized for use with the IHS, the instructions inhibit sending of the critical parameters to the server.

Systems and methods to provide pre-deployment assessment for device integrity

A computing device component monitoring system includes at least one certificate generation system, and a computing device that includes a first component and that is coupled to the at least one certificate generation system via a network. The computing device receives a first component verification certificate from the at least one certificate generation system that identifies a first component lifetime after which the first component in the computing device should be replaced, and stores the first component verification certificate in a database that is accessible to the computing device. The computing device determines that the first component lifetime has been exceeded, and identifies a first component alert policy in response. The computing device generates a first component alert based on the first component alert policy.

Computing device component monitoring system

Growing community of inventors

Bengaluru, India

Rama Rao Bisa