Amazon Technologies, Inc.

Ziv Harel

Nafea Bshara

Darin Lee Frink

Jason Alexander Harland

Anthony Nicholas Liguori

Matthew Shawn Wilson

Yotam Admon

Ali Elashri

Shay Madar

Adi Habusha

Georgy Machulsky

Christopher James BeSerra

Alex Levin

Luke Thomas Gregory

Hani Ayoub

Robert Klein

David Ben-Dror

Noam Navon

Evgeny Khanin

Ofer Katz

Daniel Elkaslassy

Sergei Shtern

A computer system includes a processor module comprising a vapor chamber heat spreader for removing heat from a bare die processor. The vapor chamber heat spreader may be coupled with the bare die processor via a mounting structure. The vapor chamber heat spreader may have a pedestal that extends towards the bare die processor, such that a bottom surface of the pedestal is positioned proximate a top surface of the bare die processor. In various embodiments, the processor module may be configured to enable servicing of one or more components. For example, the processor module may have a mechanism that allows for uncoupling the vapor chamber heat spreader from the bare die processor, so as to enable replacement of the bare die processor in some embodiments.

Vapor chamber heat spreader for bare die processors

A hardware card that can be implemented in a server system is disclosed. The hardware card may be, for instance, a network interface card coupled to a board such as a motherboard or backplane in a computing system. In various instances, the hardware card reports a temperature to a management controller on the board (e.g., a baseboard management controller) that is adjusted due to thermal degradation of the hardware card. For example, the temperature output by the hardware card may be adjusted based on a comparison of a current temperature profile (including transient temperature of the hardware card) to a predetermined temperature profile stored on the hardware card.

Dynamic hardware card thermal adaptation

A computer system includes a chassis comprising location indicating elements, such as springs, magnets, standoffs, or other types of location indicating elements physically attached to the chassis in a configuration that indicates locations in the chassis. Also, the computer system includes multiple printed circuit boards comprising pads configured to interface with the location indicating elements, wherein combinations of sensed or not sensed location indicating elements at the pads of the printed circuit boards provide a physically verified placement location for the printed circuit boards.

Board physical placement verification in a server chassis

A technology is described for a device diagnosis station. The device diagnosis station may be configured to identify an electronic device physically connected to the device diagnosis station, evaluate an operational state of the electronic device by executing testing instructions configured to test the functionality of the electronic device and collect operational state information for the electronic device. The device diagnosis station may be configured to determine the operational state of the electronic device and execute recovery instructions to restore the electronic device to an improved state when a recoverable error is detected. The device diagnosis station may be configured to initiate a device return procedure for the electronic device when a non-recoverable error state is detected.

Device diagnosis

Disclosed herein are techniques for maintaining a secure environment on a server. In one embodiment, the server includes a baseboard management controller (BMC), a first Ethernet port coupled with an adapter device network comprising a plurality of adapter devices, and a master adapter device including a second Ethernet port and a network switch, the network switch being controllable to be selectively coupled with at least one of the BMC, the first Ethernet port, or the second Ethernet port. The master adapter device may receive a network packet from at least one of: the first Ethernet port, the second Ethernet port, or the BMC, and determine, based on a forwarding policy, whether to forward the network packet. Based on a determination to forward the network packet, the master adapter device may determine a destination, and control the network switch to transmit the network packet to the destination.

Secure environment on a server

A server includes a motherboard and a programmable logic device coupled to the motherboard. The server also includes a hardware device coupled to the motherboard and the programmable logic device. The server further includes a non-volatile memory storing firmware for the hardware device. The non-volatile memory is coupled to the motherboard and the programmable logic device. The server further includes a peripheral device coupled to the motherboard and the programmable logic device. The peripheral device receives firmware data from a management server. The peripheral device verifies that the firmware data corresponds to the hardware device. The peripheral device further holds the hardware device in reset mode. The peripheral device stores the firmware data on the non-volatile memory to update the firmware and releases the hardware device from reset mode after updating the firmware.

Secure firmware deployment

Disclosed herein are techniques for maintaining a secure execution environment on a server. In one embodiment, the server includes a non-volatile memory storing firmware, a programmable security logic coupled to the non-volatile memory, an adapter device coupled to the programmable security logic, and a processor communicatively coupled to the non-volatile memory via the programmable security logic. The adapter device and/or the programmable security logic can verify the firmware in the non-volatile memory while holding the processor and/or a baseboard management controller (BMC) in power reset, release the processor and the BMC from reset to boot the processor and the BMC after the firmware is verified, and then disable communications between the processor and the BMC and deny at least some requests to write to the non-volatile memory by the processor or the BMC.

Secure execution environment on a server

The following description is directed to cable-based configuration. In one example, a method can include determining a first end of a cable is connected to a first device and a second end of the cable is connected to a second device. The first device can be configured to perform a first function when it is determined the first end of the cable is connected to the first device. The second device can be configured to perform a second function when it is determined the second end of the cable is connected to the second device. The second function can be different from the first function, such that the first device and the second device are configured differently based on which end of the cable is connected to the respective device.

Cable-based configuration

Provided are systems and methods for a location-aware, self-configuring peripheral device. In some implementations, the peripheral device may include two or more personalities. In these implementations, a personality enables the peripheral device to provide a service. In some implementations, the peripheral device may be configured to receive a configuration cycle. In some implementations, the peripheral device may further select a personality from among two or more personalities. The peripheral device may use information derived from the configuration cycle to make this selection. Selecting a personality may further include configuring the peripheral device according to the selected personality.

Growing community of inventors

Kibbutz Megiddo, Israel

Ziv Harel