Abstract: An information handling system may include at least one processor and a memory. The information handling system may be configured to perform a maintenance operation involving a plurality of hosts of an information handling system cluster by: determining a score for each host based on a sum of working memory sizes for all active virtual machines executing on such host plus a sum of persistent storage sizes for all virtual machines stored on such host; based on the determined scores, selecting a first host for upgrading; migrating at least a portion of all virtual machines stored on the first host from the first host to one or more other hosts; and causing the first host to perform the maintenance operation.

Abstract: An information handling system may include at least one processor and a memory. The information handling system may be configured to: store a cryptographic lockbox that is secured by a set of secrets and that is accessible from a virtual machine, wherein the set of secrets comprises a first subset of one or more secrets based on a hardware environment of the information handling system and a second subset of one or more secrets based on a virtualized environment associated with the virtual machine; migrate the virtual machine to a different information handling system, wherein the migration is configured not to alter the second subset; and access the cryptographic lockbox from the migrated virtual machine.

Abstract: Disclosed methods and systems for managing on-premises information handling resources establish, by an in-cloud web portal, an agentless connection to an on-premises information handling resource and performing, via the agentless connection, a configuration management operation to modify a configuration of the on-premises handling resource. Establishing the agentless connection and performing the configuration management operation may include one or more appropriate API calls. Disclosed teachings enable a web-accessible, public cloud portal to perform active configuration management of on-premises resources scattered across any number of distinct and potentially isolated customer sites without deploying and maintain management agent software within the customer's private cloud. The on-premises resources a multi-node cluster provided by a node or nodes of a one or more HCI appliances.

Abstract: Methods and systems disclosed herein extend an entity's private cloud security model to the entity's public cloud. Public cloud access permissions are defined, in accordance with a security model implemented in the entity's private cloud, for one or more of the entity's public cloud resources. The public cloud permissions are pushed or otherwise provided to an access module within the private cloud. Upon receiving a request to access a public cloud resource, the private cloud access module is invoked to grant or deny the access request in accordance with the public cloud access permissions. Similarly, upon receiving a request to access a private cloud resource, the private cloud access module is invoked to process the access request in accordance with private cloud access permissions, thereby beneficially enabling users to interact with a single access interface regardless of whether the resource reside within the entity's cloud platform.

Abstract: A disclosed method for managing access control in cloud based environment with on-premises and off-premises access portals includes storing account mapping information, indicative of an association between on-premises accounts off-premises accounts, to a lockbox in each of the plurality of clusters and deploying an off-premises agent in each of the clusters. One or more of the clusters may exist within a hyper-converged infrastructure system. Each off-premises agent may be configured to retrieve cluster access information indicative of access permissions for the on-premises node cluster and upload the cluster access information to an off-premises access control service. The access permissions for the on-premises cluster and the off-premises access permissions may comprise role based access permissions.

Abstract: An information handling system may include at least one processor and a memory. The information handling system may be configured to: receive, from a cloud management portal, a request to execute a management task, wherein the request includes information regarding a cloud identity associated with the request; determine a local identity that corresponds to the cloud identity; determine whether the local identity has sufficient privileges to execute the management task; and in response to a determination that the local identity does have sufficient privileges to execute the management task, cause the management task to be executed.

Abstract: A disclosed method for managing access to cloud infrastructure include responding to receiving a user request to access a cloud resource, such as a cluster associated with a hyper-converged infrastructure appliance, associated with an entity by performing a layered authentication of the user. The layered authentication includes determining first layer privileges based on first user credentials associated with a first authentication module and determining second layer privileges based on second user credentials associated with a second authentication module. The request is granted or denied based on a combination of the user's first and second layer privileges. The first authentication module may be associated with a first authentication domain such as an authentication domain of a cloud service provider or an OEM of cloud infrastructure resources. The second authentication module may comprise an authentication module maintained by the entity associated with the resource targeted by the user request.

Abstract: A method, computer program product, and computing system for generating a tagged telemetry data portion concerning a storage system. The tagged telemetry data is processed via one or more heath check microservices to generate one or more tagged health packets. The one or more tagged health packets are processed via one or more health awareness microservices to generate one or more health awareness results.

Abstract: A method, computer program product, and computing system for receiving usage and configuration data from a storage system. The usage and configuration data is compared to one or more best practice models to determine one or more recommendations. The one or more recommendations are provided to a user of the storage system.

Abstract: A method, computer program product, and computing system for receiving temporal telemetry data portions concerning one or more elements of a storage system. A health score is assigned to the temporal telemetry data portions and a reliability score is assigned to the health score.

Abstract: A method, computer program product, and computing system for receiving telemetry data from a remote storage system. The telemetry data is analyzed to assign a system health score to the remote storage system.

Abstract: A method, computer program product, and computing system for receiving telemetry data from a remote storage system. The remote storage system includes a plurality of subsystems. The telemetry data is analyzed to assign a subsystem health score to each of the plurality of subsystems, thus defining a plurality of subsystem health scores. A system health score is assigned to the remote storage system based, at least in part, upon each of the subsystem health scores.

Abstract: A plurality of microwave semiconductor devices is provided by plating a thin conductive layer on a surface of a wafer of semiconductor material, masking selected portions of the thin conductive layer, and plating unmasked portions of the thin conductive layer to form a thicker, apertured support layer with the apertures in the support layer providing a thin contact. After forming the thicker, apertured support layer, substantial portions of the semiconductor material are removed to form the semiconductor devices as a plurality of mesa shaped diodes, with each one of the semiconductor mesa shaped diodes being formed on a corresponding one of the thin contacts, and with the plurality of mesa shaped diodes being mutually supported by the support layer and integrally formed thin contacts. Each contact and the support are selectively etched to pattern portions of the support and thin contacts into a frame.

Abstract: A plurality of microwave semiconductor devices is provided by plating a thin conductive layer on a surface of a wafer of semiconductor material, masking selected portions of the thin conductive layer, and plating unmasked portions of the thin conductive layer to form a thicker, apertured support layer with the apertures in the support layer providing a thin contact. After forming the thicker, apertured support layer, substantial portions of the semiconductor material are removed to form the semiconductor devices as a plurality of mesa shaped diodes, with each one of the semiconductor mesa shaped diodes being formed on a corresponding one of the thin contacts, and with the plurality of mesa shaped diodes being mutually supported by the support layer and integrally formed thin contacts. Each contact and the support are selectively etched to pattern portions of the support and thin contacts into a frame.