Emc Corporation

Emc IP Holding Company LLC

Yidong Wang

Gregory William Lazar

Deene A Dafoe

Feng Zhou

Bruce Rabe

Russell R Laporte

Sriram Krishnan

Neil F Schutzman

Tianming Zhang

Weijing Song

Michael Hamel

Greg Mogavero

Prakash Chanderia

Ashwin Ramkrishna Tidke

A method is used in managing virtual systems in data storage systems. First and second virtual systems are managed. The first virtual system uses a first format for communicating with a data storage system and the second virtual system uses a second format for communicating with the data storage system. A universal virtual system management module of the data storage system is used for communicating with the first and second virtual systems. The universal virtual system management module communicates with the first virtual system by using a first virtual system handler configured to communicate based on the first format. The universal virtual system management module communicates with the second virtual system by using a second virtual system handler configured to communicate based on the second format.

Managing virtual systems in data storage systems

A method is used in mapping data storage and virtual machines. A logical volume from a data storage system is provided for use by a hypervisor. The hypervisor is queried through a web service to identify a virtual machine of the hypervisor. It is determined that the virtual machine is using the logical volume.

Mapping data storage and virtual machines

Described are techniques for configuring storage access control. A set of inputs including a first identifier of an initiator port and a device set devices in a data storage system is received. Responsive to receiving the set of inputs, an allowable path set is automatically defined for the initiator in accordance with an initiator-level of granularity. Each device in the device set is accessible by the initiator over each path in the allowable path set. The allowable path set includes paths between the initiator port and each target port of the data storage system. A set of target ports is either specified using a wildcard indicator denoting all target ports of the data storage system, or the set of target ports is otherwise determined implicitly as all target ports of the data storage system.

Configuring storage access control

A technique provides secure access to a set of credentials within a data storage system. The technique involves obtaining a unique identifier (e.g., a hostname which is unique to the system) and a set of stable values (e.g., machine-generated codes which are random to users of the system); and, in response to a storage request from a client application, storing a set of credentials of the client application within a data security mechanism of the data storage system. The set of credentials is in encrypted form when stored within the data security mechanism of the data storage system. The technique further involves configuring the data security mechanism of the data storage system to provide the set of credentials in non-encrypted form in response to new fingerprints matching a system fingerprint which is formed at least in part from the unique identifier and the set of stable values.

Providing secure access to a set of credentials within a data security mechanism of a data storage system

Growing community of inventors

Upton, MA, United States of America

Yidong Wang