American Megatrends, Inc.

American Megatrends International, LLC

Sanjoy Maity

Baskar Parthiban

Samvinesh Christopher

Satheesh Thomas

Joseprabu Inbaraj

Harikrishna Doppalapudi

Purandhar Nallagatla

Ramakoti Reddy Bhimanadhuni

Anurag Bhatia

Varadachari Sudan Ayanam

Jason Messer

Chandrasekar Rathineswaran

Stefano Righi

Muthukkumaran Ramalingam

Umasankar Mondal

Brandon Mitchell Burrell

Clark Kerr

Venkatesh Ramamurthy

Govind A Kothandapani

Bakka Ravinder Reddy

Santhosh Samuel Mathews

Divya Nettem

Gopinath Sekaran

Lokeshraj Subramanian

Blake Yang

Technologies are described herein for providing a Baseboard Management Controller ('BMC')-based security processor. The disclosed BMC-based security processor can provide a hardware Root of Trust (“RoT”) for a computing platform without the addition of specialized silicon to the platform and while minimizing the number of attack points. The disclosed BMC-based security processor can also provide functionality for securely filtering requests made on certain buses in a computing platform. Through implementations of the features identified briefly above, and others described herein, various technical benefits can be achieved such as, but not limited to, increased security as compared to previous computing systems that utilize a BMC to provide a hardware RoT and reduced complexity and cost as compared to previous computing systems that utilize a separate hardware device, such as a Field Programmable Gate Array (“FPGA”) or a microcontroller, to provide a hardware RoT.

Baseboard Management Controller (BMC)-based security processor

Technologies are described herein for providing a Baseboard Management Controller ('BMC') -based security processor. The disclosed BMC-based security processor can provide a hardware Root of Trust ('RoT') for a computing platform without the addition of specialized silicon to the platform and while minimizing the number of attack points. The disclosed BMC-based security processor can also provide functionality for securely filtering requests made on certain buses in a computing platform. Through implementations of the features identified briefly above, and others described herein, various technical benefits can be achieved such as, but not limited to, increased security as compared to previous computing systems that utilize a BMC to provide a hardware RoT and reduced complexity and cost as compared to previous computing systems that utilize a separate hardware device, such as a Field Programmable Gate Array (&#x201c;FPGA&#x201d;) or a microcontroller, to provide a hardware RoT.

Baseboard management controller (BMC)-based security processor

In an aspect of the disclosure, a method, a computer-readable medium, and a computer system are provided. The computer system includes a baseboard management controller (BMC). The BMC receives a first message from a first remote device on a management network. The BMC determines whether the first message is directed to a storage service or fabric service running on a host of the BMC. The host is a storage device. The BMC extracts a service management command from the first message, when the first message is directed to the storage service or fabric service. The BMC sends, through a BMC communication channel to the host, a second message containing the service management command to the host. The BMC communication channel established for communicating baseboard management commands between the BMC and the host.

Common server san core solution to enable software defined storage

A computer system includes a BMC and a host of the BMC. The BMC receives a first message from a first remote device on a management network. The BMC determines whether the first message is directed to a storage service or fabric service executed on a main processor of a storage controller of the host. The host is a storage device. The storage controller includes an RDMA controller in communication with the main processor through an internal communication channel of the storage controller. The RDMA controller is managed by the storage service. The BMC extracts a service management command from the first message, when the first message is directed to the storage service or fabric service. The BMC sends, through a BMC communication channel established for communicating baseboard management commands between the BMC and the host, a second message containing the service management command to the host.

Enablement of software defined storage solution for NVME over ethernet fabric management on storage controller

A computer system includes a BMC and a host of the BMC. The BMC redirect, through a BMC communication channel, a local media including a disk management tool to a host of the BMC as a particular drive. The host is a storage device connected to one or more storage drives. The disk management tool is configured to prepare a storage area of the one or more storage drives for installation of storage service on the host. The storage service managing a RDMA controller at the host. The BMC configures the host to boot from the particular drive. The BMC sends a first instruction to the host instructing the BMC to reboot. The BMC receives from the host a command for reading the disk management tool. The BMC sends the disk management tool to the host.

Auto-provisioning and auto-installation of server SAN target

A computer system has a first node including a first baseboard management controller (BMC) and a first host of the first BMC. The first node determines that the first node is an active node. The first node operates a first storage service at the first host. The first host is a first storage device connected to one or more storage drives. The first storage service manages a first Remote Direct Memory Access (RDMA) controller for accessing user data stored on the one or more storage drives. The first node indicates to a second node that the first node is operating normally. The first node syncs data available on the first node with the second node.

Enabling high availability in server SAN enabled storage box

A computer system includes a first baseboard management controller (BMC) and a first host of the first BMC. The first host operates a first storage service at the first host. The first host is a first storage device connected to one or more storage drives. The first storage service managing a first Remote Direct Memory Access (RDMA) controller for accessing user data stored on the one or more storage drives through a storage network. The first BMC receives state information of the one or more storage drives. The first BMC sends notifications to a client of the first BMC, in response to receiving the state information.

Techniques of sending alerts from storage services running on server san target

A computer system includes a BMC and a host of the BMC. The BMC receives a first message from a first remote device on an existing out-of-band management network. The BMC determines whether the first message is directed to a storage service or fabric service running on the host, the host being a storage device. The storage service provides access to user data stored on one or more storage devices connected to the host via a storage network that is isolated from the management network. When the first message is directed to the storage service or fabric service: the BMC extracts a service command from the first message; the BMC sends, through a BMC communication channel to the host, a second message containing the service command to the host. The BMC communication channel has been established for communicating baseboard management commands between the BMC and the host.

Secured and out-of-band (OOB) server san solution on a commodity storage box

A computer system includes a BMC and a host of the BMC. The BMC receives a first message from a first remote device on a management network. The BMC determines whether the first message is directed to a storage service or fabric service executed on a central processing unit of the host. The host is a storage device. The central processing unit is in commutation with a RDMA controller through an external communication channel. The RDMA controller being managed by the storage service. The BMC extracts a service management command from the first message, when the first message is directed to the storage service or fabric service. The BMC sends, through a BMC communication channel to the host, a second message containing the service management command to the host. The BMC communication channel has been established for communicating baseboard management commands between the BMC and the host.

Enablement of software defined storage solution for NVME over ethernet fabric management on a processor

A computing pod includes one or more computing racks. Each of the one or more computing racks includes one or more computing drawers. Each of the computing drawers includes one or more computing modules. Each of the one or more computing modules includes a computing blade. A first service processor is on a first computing blade of a first computing drawer of the one or more computing drawers of a first computing rack of the one or more computing racks. The first service processor, executes a first BMC function. The first BMC function manages the first computing blade. The first service processor exposes a first PSME to a pod manager servicing the pod. The first PSME collects information of the first computing blade. The first PSME sends the information of the first computing blade to the pod manager.

Pooled system management engine on service processor of computing blade

Certain aspects of the present disclosure are directed to an IPMI bridge server configured to expand the management functions of an IPMI control system to a plurality of non-IPMI protocol specific managed devices. The IPMI bridge server includes: a processor, a network interface controller assigned with a network address; and a memory containing a firmware. When the firmware is executed at the processor, it is configured to be in communication with a group of first protocol specific managed devices through a first protocol control point and a first communication link, and a group of second protocol specific managed devices through a second protocol control point and a second communication link, and to receive management requests each for performing a protocol specific management function at one of the group of first protocol specific managed devices or the group of second protocol specific managed devices.

Method and apparatus for IPMI-bridge-server for non-IPMI devices

In an aspect of the disclosure, a method, a computer-readable medium, and a computer system are provided. A first device of the computer system provides a service interface for retrieving stored service request templates for executing actions on a computing pod. The first device receives, at the service interface, a template request for a service request template for constructing a reused service request, the reused service request requesting the computing pod to execute a first action. The first device retrieves the service request template from a data store in accordance with information provided by the template request. The first device sends the service request template in a response to the template request.

Techniques of preserving service request payloads

A computing pod includes one or more computing racks. Each of the one or more computing racks includes one or more computing drawers. Each of the computing drawers includes one or more computing modules. Each of the one or more computing modules includes a computing blade. A first service processor is on a first computing blade of a first computing drawer of the one or more computing drawers of a first computing rack of the one or more computing racks. The first service processor executes a first BMC function. The first BMC function manages the first computing blade. The first service processor determines a type of the first computing blade. The first service processor configures a first PSME in accordance with the determined type.

Dynamic personality configurations for pooled system management engine

Certain aspects direct to systems and methods for cloud based platform simulation on virtual machine for development projects of a management controller. The system includes a cloud network, which include necessary computing resources to provide at least one virtual machine (VM), such that the at least one VM is accessible on the cloud network to simulate a management controller and a host computing device for the management controller. The at least one VM includes: a firmware module for the management controller, configured to receive at least one output signal from the host computing device; and a simulator module configured to simulate the host computing device. In operation, the simulator module generates the at least one output signal based on configuration data of the host computing device, and sends the at least one output signal to the firmware module.

Cloud based platform simulation for management controller development

In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be an embedded-system device. The embedded-system device receives a first message including first command or data from a client. The embedded-system device triggers a BIOS of a host of the embedded-system device to communicate with the embedded-system device. The embedded-system device receives a request from the BIOS. The embedded-system device sends the first command or data to the BIOS in response to the request.

Growing community of inventors

Snellville, GA, United States of America

Sanjoy Maity