International Business Machines Corporation

Globalfoundries Inc.

Mcdata Corporation

Roger Gregory Hathorn

John R Flanagan

Matthew J Kalos

Bret Wayne Holley

Louis William Ricci

Harry M Yudenfriend

Scott M Carlson

Daniel Francis Casper

Patricia G Driever

Christopher J Colonna

Steven Edward Klein

Catherine C Huang

Lokesh M Gupta

Dale Francis Riedy, Jr

Matthew G Borlick

Gustav E Sittmann, Iii

Charles Scott Cardinell

Juan A Coronado

Henry Joseph May

Daniel Gene Eisenhauer

Susan Kay Candelaria

Richard Mark Sczepczenski

Mark P Bendyk

Mikel William Welsh

Beth Ann Peterson

George Kuch

Bernhard Laubli

Renato John Recio

Glen Alan Jaquette

Jeffrey William Palm

Daniel James Winarski

Louie Arthur Dickens

Clint Alan Hardy

Daniel D Sentler

Mark Steven Bayus

Mooheng Zee

Timothy J Van Patten

Dinh Hai Le

Karl Allen Nielsen

Michael E Starling

Ugochukwu Charles Njoku

Sudheer R Yelanduru

Sandy K Kao

Daniel J Perkin

Michael T Benhase

William Frank Micka

Scott Brady Compton

Stephen LaRoux Blinick

Matthew Richard Craig

Jacob Lee Sheppard

Sriharsha Jayanarayana

James Lincoln Iskiyan

Miguel A Montoya

Evan Rivera

Peter Grimm Sutton

Lawrence Carter Blount

Richard Hutzler

Aaron C Brown

Joseph Hayward

William Maurice Smith, Jr

Bharath B Somayaji

Aaron Eugene Taylor

Clarisa Valencia

Igor Popov

Kevin J Ash

Nils Haustein

Charles W Gainey, Jr

Giles R Frazier

Christoph Raisch

Warren Keith Stanley

Sonny Earl Williams

James Chien-Chiung Chen

Kevin J Gildea

Stefan Roscher

Alol Antony Crasta

Ashwani Kumar

Daniel W Sherman

Joachim Fenkes

Gustav E Sittmann

Louis C Ricci

Adelaide Margaret Richards

Gregory E McBride

Craig Anthony Klein

Andrew Dale Walls

John Charles Elliott

Brent Cameron Beardsley

Cheng-Chung Song

Micah Robison

John Richard Paveza

Raymond Michael Higgs

Gregory John Tevis

Robert J Dugan

Michael E O'Donnell

Wayne Erwin Rhoten

William Miller

Michael Joseph Azevedo

Kenneth J Fredericks

Gustav E Sittman, Iii

Timothy Alan Griffin

Roman Yusufov

Provided are a storage device, system, and method for performance enhancing measures for storage in which high-performance volumes reside. Indication is made of a volume configured in the arrays to have high-performance. An array is determined storing the indicated volume. A determination is made of storage devices in which the determined array resides. The storage devices are enabled to perform garbage collection on blocks of data having valid and invalid pages in the storage devices at a first garbage collection rate and a second garbage collection rate. The second garbage collection rate causes a storage device to perform garbage collection with respect to a greater number of blocks than the first garbage collection rate. A command is sent to the determined storage devices to garbage collect at the second garbage collection rate.

Garbage collection for storage in which high-performance volumes reside

A host port is enabled for security. In response to a determination by the host port that authentication or security association negotiation with a storage port cannot be completed successfully, the host port determines whether an audit mode indicator has been enabled in a login response from the storage port. The host port preserves input/output (I/O) access to the storage port based on determining whether the audit mode indicator has been enabled in the login response from the storage port.

Maintenance of access for security enablement on a host system

Provided are a computer program product, system, and method for determining whether to compress data at a source device to transmit to a target device. A determination is made of network bandwidth between the source device and the target device. The source device transmits data to the target device. A determination is made of source available processor resources on the source device and target available processor resources on the target device. A determination is made as to whether to compress data at the source device to transmit to the target device based on the network bandwidth, the source available processor resources, and the target available processor resources. Compression is initiated, on the source device, of the data to transmit to the target device in response to determining that the source device is to compress the data.

Determining whether to compress data at a source device to transmit to a target device

A storage port receives a login request. The storage port configures an audit mode indicator as enabled in a login response to a host port to enter a security enabled mode to indicate to the host port that Input/Output (I/O) operations are to be transmitted from the host port to the storage port even if authentication or security association negotiation with the storage port cannot be completed successfully.

Maintenance of access for security enablement in a storage device

Key management for encrypted data. A node, such as a storage device, obtains a shared key to be used in cryptographic operations. The obtaining includes using an identifier of another node, such as a host of the computing environment, and a unique identifier of the shared key to obtain the shared key. The obtained shared key is then used in one or more cryptographic operations.

Storage device key management for encrypted host data

A computer-implemented method, according to one embodiment, includes: in response to a determination that an available capacity of one or more buffers in a primary cache is not outside a predetermined range, using the one or more buffers in the primary cache to satisfy all incoming I/O requests. In response to a determination that the available capacity of the one or more buffers in the primary cache is outside the predetermined range, one or more buffers in a secondary cache are allocated, and the one or more buffers in the secondary cache are used to satisfy at least some of the incoming I/O requests.

Using multi-tiered cache to satisfy input/output requests

Provided are a computer program product, system, and method for determining key server type and key server redundancy information to enable encryption. A first key server type for a first protocol is indicated in a key server type field in response to determining a current protocol used to communicate with the key server comprises the first protocol. A query information request is submitted to the key server to determine a key server type in response to determining that the current protocol comprises the second protocol. The second key server type indicated in the response to the query information request is indicated in the key server type field in response to the response indicating the second key server type. The first or second type of key server indicated in the key server type field is used to determine information to include in a key retrieval request.

Performing key server redundancy verification to verify a key is obtained from redundant key servers

Provided are a computer program product, system, and method for processing request directed through a channel subsystem to a storage server. In one embodiment, a pattern search request is embedded in a Device Command Word (DCW) which allows the storage server to do all or substantially all of the search and comparison work in response to as few as a single DCW from the host. In addition, I/O processing can be enhanced to use the target record of interest of a successful embedded pattern search request as the starting point for read/write I/O processing, all in response to as few as a single DCW. Still further, orientation rules can also be relaxed such that once a target record is found, any and all fields of the record can be accessed and utilized in execution of subsequent commands of the initial or subsequent DCWs of the chain.

Pattern search request embedded in a transport mode command word for a channel subsystem in a storage system

A host is configured to communicate with a storage controller over a first storage area network. A request is transmitted from the host to the storage controller to provide read diagnostic parameters of a second storage area network that is used to mirror data controlled by the storage controller to another storage controller. The host receives the read diagnostic parameters of the second storage area network from the storage controller.

Generation of host requests to a storage controller for read diagnostic parameters for a data mirroring configuration

A path is secured from one node to another node of the computing environment. The one node obtains a first encryption key and a second encryption key. A shared key is obtained by the one node from a key server, and the shared key is used to encrypt a message. The encrypted message includes the first encryption key and the second encryption key. The encrypted message and an identifier of the shared key is sent from the one node to the other node, and a response message is received by the one node. The response message at least provides an indication that the other node received the encrypted message and obtained the shared key.

Securing a path at a selected node

A path for a node of a computing environment is secured. The securing includes obtaining, by the node, a message that includes an identifier of a shared key and an encrypted message. The node obtains the shared key from a key server and uses it to decrypt the encrypted message to obtain an encryption key and one or more parameters. A security parameters index to be associated with the encryption key and the one or more parameters is obtained. The node sends a response message to another node, the response message including the security parameters index.

Securing a path at a node

A computer-implemented method, according to one approach, includes: receiving a stream of incoming I/O requests, all of which are satisfied using one or more buffers in a primary cache. However, in response to determining that the available capacity of the one or more buffers in the primary cache is outside a predetermined range: one or more buffers in the secondary cache are allocated. These one or more buffers in the secondary cache are used to satisfy at least some of the incoming I/O requests, while the one or more buffers in the primary cache are used to satisfy a remainder of the incoming I/O requests. Moreover, in response to determining that the available capacity of the one or more buffers in the primary cache is not outside the predetermined range: the one or more buffers in the primary cache are again used to satisfy all of the incoming I/O requests.

A computational device receives an indication of a minimum retention time in a cache for a plurality of tracks of an application. In response to determining that tracks of the application that are stored in the cache exceed a predetermined threshold in the cache, the computational device demotes one or more tracks of the application from the cache even though a minimum retention time in cache has been indicated for the one or more tracks of the application, while performing least recently used (LRU) based replacement of tracks in the cache.

Allocation of cache storage among applications that indicate minimum retention time for tracks in least recently used demoting schemes

Determining key server type and key server redundancy information to enable encryption

Growing community of inventors

Tucson, AZ, United States of America

Roger Gregory Hathorn