Abstract: A platform root-of-trust system includes a System Control Processor (SCP) subsystem coupled to a central processing subsystem, a BIOS subsystem, and an I/O device. In response to an initialization instruction, the SCP subsystem begins initialization operations prior to the beginning of initialization operations for the central processing subsystem, the BIOS subsystem, and the I/O device. As part of SCP initialization operations, the SCP subsystem validates SCP subsystem initialization information to provide validated SCP subsystem initialization information, and uses the validated SCP subsystem initialization information to complete the SCP initialization operations.

Abstract: A client-isolation internal/external fabric LCS provisioning system includes an orchestrator device coupled to a client device via an external fabric, and coupled to resource devices via an internal fabric that is not accessible to the client device via the external fabric. The orchestrator device configures the resource devices to communicate with each other in a manner that satisfies a workload intent for a workload requested by the client device, and presents an LCS provided using the configured resource devices to the client device via the external fabric. When the orchestrator device receives LCS communication(s) directed to the LCS from the client device via the external fabric, it provides instruction(s) to at least one of the resource devices via the internal fabric that are based on the LCS communication and that are configured to cause the at least one of the resource devices to perform function(s) for the LCS.

Abstract: A Logically Composed System (LCS) resource device access control and management system includes an orchestrator device in a resource system that is coupled to a resource management system, resource devices, and a presentation/management subsystem. The orchestrator device receives an identification from the resource management system of a first subset of the resource devices for providing a first LCS, and first Service Level Agreement (SLA) information defining a first SLA for the first LCS. Based on the first SLA information, the orchestrator device allocates a first portion of a first resource device included in the resource devices to satisfy the first SLA for the first LCS, and provides a first resource device portion configuration instruction to the presentation/management subsystem that is configured to cause the presentation/management subsystem to configure the resource system to allow the first LCS to access and utilize the first portion of the first resource device.

Abstract: A Logically Composed System (LCS) resource policy enforcement system includes resource devices coupled to an LCS provisioning administrator device, a client system, and an orchestrator device coupled to the resource devices and the client system. The orchestrator device uses a first subset of the resource devices to provide an LCS to the client system based on a workload intent provided by the client system, associates the LCS with a client identifier for the client system, and tags each of the first subset of the resource devices being used to provide the LCS with the client identifier. The orchestrator device then identifies a LCS policy for the LCS and applies the LCS policy to each of the first subset of the resource devices tagged with the client identifier to cause the LCS policy to be enforced on the client system and the LCS provisioning administrator device.

Abstract: A Logically Composed System (LCS) life-cycle management system includes an orchestrator device coupled to resource devices. The orchestrator device configures the resource devices to provide an LCS to a client device. The orchestrator device also identifies interdependencies between the resource devices and, based on those interdependencies, determines life-cycle management operations available for the LCS and presents the life-cycle management operations to the client device. When the orchestrator device receives a request to perform a first life-cycle management operation on the LCS, it performs the first life-cycle management operation on the first LCS based on the interdependencies identified between the resource devices.

Abstract: A Logically Composed System (LCS) resource device functionality provisioning system includes an orchestrator device coupled to resource devices and a resource management system. The orchestrator device identifies functionality available from the resource devices via at least one resource device communication protocol, and advertises logical functions that correspond to the functionality available from the resource devices to the resource management system via a resource management system communication protocol that is different than the at least one resource device communication protocol. When the orchestrator device receives a request from the resource management system via the resource management system communication protocol to utilize a subset of the logical functions to provide an LCS, it configures the subset of the logical functions to provide the LCS via the at least one resource device communication protocol, and provides the LCS to a client device using the subset of the logical functions.

Abstract: A client-isolation internal/external fabric LCS provisioning system includes an orchestrator device coupled to a client device via an external fabric, and coupled to resource devices via an internal fabric that is not accessible to the client device via the external fabric. The orchestrator device configures the resource devices to communicate with each other in a manner that satisfies a workload intent for a workload requested by the client device, and presents an LCS provided using the configured resource devices to the client device via the external fabric. When the orchestrator device receives LCS communication(s) directed to the LCS from the client device via the external fabric, it provides instruction(s) to at least one of the resource devices via the internal fabric that are based on the LCS communication and that are configured to cause the at least one of the resource devices to perform function(s) for the LCS.

Abstract: A device for managing composition of composed information handling includes persistent storage and a computer processor that obtains a composition request for a composed information handling system; makes a determination that the composition request is an intent based request; in response to the determination: matches an application specified by the composition request to computing resource requirements for the application; identifies, based on the computing resource requirements, at least one compute resource set having resources meeting the computing resources requirement; identifies, based on the computing resource requirements, at least one hardware resource set having resources meeting the computing resource requirements; sets up management services for the at least one hardware resource set using at least one control resource set to obtain logical hardware resources; and presents the logical hardware resources to the at least one compute resource set as bare metal resources.

Abstract: A workload compliance governor system includes a management system coupled to a computing system. A workload compliance governor subsystem in the computing system receives a workload performance request associated with a workload, exchanges hardware compose communications with the management system to compose hardware components for the workload, and receives back an identification of hardware components. The workload compliance governor subsystem then determines that the identified hardware components satisfy hardware compliance requirements for the workload, and configures the identified hardware components in the computing system based on the software compliance requirements for the workload in order to cause those identified hardware components to provide an operating system and at least one application that operate to perform the workload.

Abstract: A Logically Composed System (LCS) workload in-band service management system includes a service management subsystem coupled to a workload that is provided using a Logically Composed System (LCS), and a System Control Processor (SCP) device. The service management subsystem determines a plurality of services that are either provided by or available via the SCP device for use by the LCS, and presents a service library to the workload that identifies the plurality of services. If the service management subsystem receives a first service request from the workload for a first service that is included in the plurality of service identified in the service library, it provides a first service provisioning request to the SCP device that is configured to cause the SCP device to provide the first service to the LCS for utilization by the workload.

Abstract: A Logically Composed System (LCS) workload in-band resource device management system includes a resource device management subsystem coupled to a workload that is provided using an LCS, and to a System Control Processor (SCP) device. The resource device management subsystem determines a first plurality of resource devices that are available via the SCP device for the LCS, and presents an available-resource file hierarchy to the workload that identifies the first plurality of resource devices. When the resource device management subsystem receives a resource device request from the workload for a first resource device that is included in the first plurality of resource devices identified in the available-resource file hierarchy, it provides a resource device provisioning request to the SCP device that is configured to cause the SCP device to provide the first resource device to the LCS for utilization by the workload.

Abstract: A trusted orchestrator function subsystem inventory and verification system includes an OS, a BIOS, a management device, and a trusted orchestrator device. In response to presentation of a function subsystem to the OS during runtime, the OS generates a function subsystem detection alert that identifies the function subsystem. In response to the function subsystem detection alert, the BIOS generates and provides a BIOS inventory update that identifies the function subsystem. The management device receives the BIOS inventory update and, in response, forwards the BIOS inventory update. The trusted orchestrator device receives the BIOS inventory update and, in response, determine whether the function subsystem identified in the BIOS inventory update is included in a trusted function subsystem inventory.

Abstract: Various methods, apparatuses/systems, and media for detecting login fraud based on a machine learning model are disclosed. A processor creates a machine learning model configured to be trained to generate a score based on user's biometrics data and a pattern of activity logs data of the user; trains the machine learning model with the user biometrics data and the pattern of activity logs data in real-time; receives user credentials data from the user for login attempt into a system; compares the received user credentials data with the biometrics data and the pattern of activity logs data of the user stored on a database and the machine learning model; and generates the score, in response to comparing, by utilizing the trained machine learning model. The score is a value that the processor compares with a predetermined threshold value to determine in real-time whether the login attempt is fraudulent.

Abstract: A device access control system includes a first computing system that is coupled to a second computing system via a network, and that includes a device access controller subsystem coupled to devices, a central processing subsystem, and a device access control manager subsystem. The device access control manager subsystem identifies first application(s) configured for provisioning by the central processing subsystem and second application(s) configured for provisioning by the second computing system, configures the device access controller subsystem to provide the central processing subsystem access to a first subset of the devices to allow the central processing subsystem to provide the first application(s), and configures the device access controller subsystem to provide the second computing system access via the device access control manager subsystem to a second subset of the devices to allow the second computing device to provide the second application(s) using the second subset of the devices.

Abstract: An LCS resource device access control and management system having a resource system including an orchestrator device coupled to a resource management system and resource devices. The orchestrator device receives an identification from the resource management system of the resource devices for providing an LCS, and Service Level Agreement (SLA) information defining an SLA for the LCS. The orchestrator device uses the SLA information for the LCS to monitor each of the resource devices during their providing of the LCS and, in response, identifies a first resource device that is performing first resource device functionality that is not satisfying the SLA for the LCS. In response, the orchestrator device provides the LCS using a second resource device that performs second resource device functionality that satisfies the SLA for the LCS in place of the first resource device.

Abstract: A device access control system includes a computing system having a device access controller subsystem coupled to devices and a central processing subsystem. A device access control manager subsystem is coupled to the device access controller subsystem and operates, during initialization operations for the computing system, to identify application(s) that are configured to be provided by the central processing subsystem, and identify a first subset of the devices that satisfy application provisioning requirements for the application(s).

Abstract: A system control processor manager for performing workloads using composed information handling systems instantiated using information handling systems includes persistent storage and a workload manager. The workload manager obtains performance information for a workload of the workloads; makes a determination, based on the performance information, to suspend performance of the workload; in response to the determination: deallocates a first computing resource of a composed information handling system performing the workload to a reserved pool; and deallocates a second computing resource of the composed information handling system to a freely allocable pool.

Abstract: A system control processor manager for servicing workloads using composed information handling systems instantiated using information handling systems includes persistent storage and a workload manager. The workload manager obtains a workload request for a workload of the workloads; predicts future resource needs for the workload during a future time period; makes a determination that a portion of free resources of the information handling systems are available to meet the future resource needs; reserves the portion of the free resources based on the determination to obtain reserved resources during the future time period; and composes a composed information handling system of the composed information handling systems using the reserved resources during the future time period to service the workload request.

Abstract: An information handling system may include a processor, a management controller communicatively coupled to the processor and configured for out-of-band management of the information handling system, and a smart network interface card communicatively coupled to the processor and the management controller and configured to receive telemetry information from telemetry sources of the information handling system and perform advanced processing of the telemetry information.

Abstract: An information handling system for obtaining composed information handling systems includes resource set components and a system control processor. The system control processor makes an identification, based on monitoring of a resource set component of the resource set components, of an operation event; in response to the identification: makes a determination that the operation event is not immediately remediable based on the monitoring of the resource set component; in response to the determination: modifies the monitoring of the resource set component to obtain refined operation data for the resource set component; and performs an action set, based on the refined operation data, to modify operation of the resource set component.