Abstract: Selecting user access policies for a new system, by collecting user, access policy, and resource metadata for a plurality of other users storing data dictated by one or more access restriction policies. The collected metadata is anonymized with respect to personal identifying information, and is stored in an anonymized analytics database. The system receives specific user, access policy and resource metadata for the new system from a specific user, and matches the received specific user metadata to the collected metadata to identify an optimum access policy of the one or more access policies based on the assets and access restriction requirements of the new system. The new system is then configured with the identified optimum access policy as an initial configuration.

Abstract: Methods, systems, and computer programs encoded on computer storage medium, for verifying, by a mask ROM of a CPU of a first computing device and with fused keys included by the CPU, a boot loader that is included by a flash memory of the first computing device, in response to verifying the boot loader, verifying, by the boot loader and with boot loader keys included by the flash memory, a kernel included by the a memory device of the first computing device, in response to verifying the kernel, decrypting, by the kernel using a hidden root key (HRK) included by the CPU of the first computing device, a device unique certification (DUC) included by the flash memory, in response to decrypting the DUC, generating, by the first computing device, a proof-of-possession of the DUC.

Abstract: In accordance with embodiments of the present disclosure, a system may include a plurality of chassis, each chassis comprising a plurality of information handling systems and a private inter-chassis network configured to couple the plurality of chassis to one another. Each chassis of the plurality of chassis may be configured to advertise a message to the private inter-chassis network, the message comprising information regarding such chassis. The plurality of chassis may detect the presence of each other based on messages advertised from each chassis and the plurality of chassis may nominate a lead chassis from the plurality of chassis to serve as a single point of management of the system.

Abstract: Methods, systems, and computer programs encoded on computer storage medium, for verifying, by a mask ROM of a CPU of a first computing device and with fused keys included by the CPU, a boot loader that is included by a flash memory of the first computing device, in response to verifying the boot loader, verifying, by the boot loader and with boot loader keys included by the flash memory, a kernel included by the a memory device of the first computing device, in response to verifying the kernel, decrypting, by the kernel using a hidden root key (HRK) included by the CPU of the first computing device, a device unique certification (DUC) included by the flash memory, in response to decrypting the DUC, generating, by the first computing device, a proof-of-possession of the DUC.

Abstract: An information handling system may include a processor, a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the processor to: (i) responsive to a physical connection being made between components of a system comprising multiple information handling system chassis, receive a message; (ii) process information present in the message indicative of a topology of connectivity among the components of the system; and (iii) update a data structure defining the topology of connectivity of the various components of the system based on the information present in the message.

Abstract: In accordance with embodiments of the present disclosure, a system may include a plurality of chassis, each chassis comprising a plurality of information handling systems and a private inter-chassis network configured to couple the plurality of chassis to one another. Each chassis of the plurality of chassis may be configured to advertise a message to the private inter-chassis network, the message comprising information regarding such chassis. The plurality of chassis may detect the presence of each other based on messages advertised from each chassis and the plurality of chassis may nominate a lead chassis from the plurality of chassis to serve as a single point of management of the system.

Abstract: An information handling system may include a processor, a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the processor to: (i) responsive to a physical connection being made between components of a system comprising multiple information handling system chassis, receive a message; (ii) process information present in the message indicative of a topology of connectivity among the components of the system; and (iii) update a data structure defining the topology of connectivity of the various components of the system based on the information present in the message.