Abstract: Embodiments are described for operating a device management bus coupled to a remote access controller and a managed device. The remote access controller detects an inoperable state of the bus and determines a FRU (Field Replaceable Unit) memory is accessible on the managed device. A predefined reset indicator is written to the FRU memory. The managed device monitors for the reset indicator being written to a specified location in FRU memory. Upon detecting the reset indicator in FRU memory, the managed device resets a bus controller coupled to the device management bus and transmits a reset notification on the device management bus. The remote access controller may include an I2C shim that controls access to an I2C multiplexer utilized for transmitting I2C commands from a service processor and an I2C coprocessor, preventing certain inoperable bus states due to concurrent operation of the I2C multiplexer by the I2C coprocessor and the service processor.

Abstract: Embodiments are described for detecting and recovering from an inoperable device management bus. A remote management controller is configured to offload device management bus transactions that use a messaging protocol. The messing protocol transactions are offloaded to a bus protocol controller that is responsible for managing bus operations using the messaging protocol. The bus protocol controller updates a set of bus status counters stored in a shared memory based on the processing of the offloaded messaging protocol transactions. The remote management controller processes device management bus transactions that use a bus protocol and updates the bus status counters based on the status of the bus protocol transactions. The remote management controller determines the status of the device management bus based on the bus status counters in shared memory, if the device management bus is inoperable, resets the remote management controller.

Abstract: Embodiments provide methods and systems for detecting rogue endpoints on a device management bus. A communications controller configured as a bus owner initiates discovery of managed devices coupled to the bus and generate a unique identifier for each managed device. The communications controller transmits a bus configuration message to the managed devices, including the respective unique identifiers. The managed devices are configured as bus endpoints based on the bus configuration message. The managed devices also capture the bus address of the communications controller from the received bus configuration message. Messages received by a managed device are authenticated as originating from the communications controller if the messages include the unique identifier provided to that managed device. The messages may be further authenticated by comparing the bus address of the message sender against the captured bus address of the communications controller.

Abstract: Periods of interoperability of sideband buses prevent effective management of managed devices by a remote access controller. Embodiments avoid periods of inoperability of sideband buses and recover the sideband bus without resetting the managed devices or the IHS (Information Handling System). The remote access controller configures timer and transmits the timer to a managed device. The managed device monitors the sideband for messages for the remote access controller. If no messages are received before expiration of the timer, the managed device resets its sideband bus endpoint, without resetting the managed device.

Abstract: Sideband device management bus messages are filtered using software operations in order to minimize dropped messages and to maintain the bus in an operable state. Redundant sideband device management buses are utilized in order to provide fail-over transmission of messages in scenarios where one of the buses becomes inoperable. Multi-packet messages are transmitted to managed devices via the sideband bus connections. If an inoperable state is detected in a sideband bus connection during transmission of a multi-packet message, the portion of the multi-packet message not received by the managed device is transmitted via a redundant sideband bus connection with the managed device. Software filtering of bus transactions utilizes a circular DMA buffer for storing all incoming transactions. Transactions of interest are copied to buffers associated with specific endpoints for processing.

Abstract: A system for polling components is disclosed that includes a plurality of processors and a control system configured to interface with each of the plurality of processors, and to 1) poll each of the plurality of processors using a first polling loop and 2) transfer one of the plurality of processors to a second polling loop if the one of the plurality of processors is non-responsive to the poll.

Abstract: A web-based graphical user interface system includes an embedded controller in a chassis that couples to a physical display device and input device, and creates a virtual display device and input device. When an input is received from the physical input device, the embedded controller generates a virtual input on the virtual input device. A chassis management controller in the chassis is coupled to the embedded controller, and views the virtual display device and input device as local devices. The chassis management controller may render a web-based graphical user interface and direct it to the virtual display device such that it is transmitted to the embedded controller for display on the physical display device. The chassis management controller may also identify the virtual input generated by the embedded controller on the virtual input device and, in response, translates the virtual input into a web-based graphical user interface event.

Abstract: In accordance with embodiments of the present disclosure, an information handling system may include a processor, a peripheral device, and a service processor communicatively coupled to the processor and the peripheral device and configured to perform out-of-band management of the information handling system. The service processor may further configured to communicatively couple to a management controller having executing thereon a virtual service processor, receive a command associated with the peripheral device from the management controller, deliver the command to the peripheral device, receive data from the peripheral device, and communicate the data to the management controller.

Abstract: A method and system provide local key management for storage enclosures. The method includes retrieving first security content from a security vault of a service processor, then dynamically detecting a hardware interface communicatively coupled to the service processor. A data storage device, communicatively coupled to the hardware interface is dynamically detected. A dynamic determination is made as to whether the data storage device is a self-encrypting capable data storage device. In response to the data storage device being a self-encrypting capable data storage device, a second security content is retrieved from the data storage device, and a validation regarding an association between the first security content and the second security content is made. Finally, in response to a positive validation of the association between the first security content and the second security content, security keys are transmitted to the data storage device, and access to the data storage device is enabled.

Abstract: A method and system for local key management setup and recovery includes receiving a lock request to secure one or more drives, then querying, for one or more key identifiers associated with a requesting device. The method includes: in response to receiving at least one key identifier, dynamically generating a first public-private key and a first public certificate associated with the at least one key identifier; and assigning the first public-private key and the first public certificate to the drives. The method further includes: concealing contents of the first public-private key and first public certificate; automatically transmitting the first public certificate to the first requesting device; and invoking the first public-private key to secure the drives. Finally, the method includes creating a recovery key, generating a recovery certificate associated with the recovery key, then, archiving the recovery key and the recovery certificate in a recovery database and a recovery server.

Abstract: A method and information handling system (IHS) for identifying communication threats in an IHS. The method includes triggering a board management controller (BMC) to transmit a plurality of memory addresses identifying where a plurality of network packets received by the IHS are stored. A field programmable gate array (FPGA) within a processor receives the memory addresses of the network packets and retrieves the network packets. The network packets are analyzed by comparing at least one threat signature that is associated with undesired network behavior with the contents of the network packets. In response to the at least one threat signature matching the contents of at least one of the network packets, an intrusion alert is transmitted to the BMC.

Abstract: A method and system provide local key management for storage enclosures. The method includes retrieving first security content from a security vault of a service processor, then dynamically detecting a hardware interface communicatively coupled to the service processor. A data storage device, communicatively coupled to the hardware interface is dynamically detected. A dynamic determination is made as to whether the data storage device is a self-encrypting capable data storage device. In response to the data storage device being a self-encrypting capable data storage device, a second security content is retrieved from the data storage device, and a validation regarding an association between the first security content and the second security content is made. Finally, in response to a positive validation of the association between the first security content and the second security content, security keys are transmitted to the data storage device, and access to the data storage device is enabled.

Abstract: In accordance with embodiments of the present disclosure, an information handling system may include a processor, a peripheral device, and a service processor communicatively coupled to the processor and the peripheral device and configured to perform out-of-band management of the information handling system. The service processor may further configured to communicatively couple to a management controller having executing thereon a virtual service processor, receive a command associated with the peripheral device from the management controller, deliver the command to the peripheral device, receive data from the peripheral device, and communicate the data to the management controller.

Abstract: A method and system for local key management setup and recovery includes receiving a lock request to secure one or more drives, then querying, for one or more key identifiers associated with a requesting device. The method includes: in response to receiving at least one key identifier, dynamically generating a first public-private key and a first public certificate associated with the at least one key identifier; and assigning the first public-private key and the first public certificate to the drives. The method further includes: concealing contents of the first public-private key and first public certificate; automatically transmitting the first public certificate to the first requesting device; and invoking the first public-private key to secure the drives. Finally, the method includes creating a recovery key, generating a recovery certificate associated with the recovery key, then, archiving the recovery key and the recovery certificate in a recovery database and a recovery server.

Abstract: A method, video processing system, and information handling system (IHS) provides rendering of video data. The method includes triggering a management controller to generate a virtual monitor that is accessible by a host. The method further includes, in response to the processor writing video data to the video driver, the video data is converted to bulk video data. The bulk video data is transmitted to the management controller, and the management controller causes a virtual monitor driver corresponding to the virtual monitor to convert the bulk video data to a re-converted video data.

Abstract: A method and information handling system (IHS) for identifying communication threats in an IHS. The method includes triggering a board management controller (BMC) to transmit a plurality of memory addresses identifying where a plurality of network packets received by the IHS are stored. A field programmable gate array (FPGA) within a processor receives the memory addresses of the network packets and retrieves the network packets. The network packets are analyzed by comparing at least one threat signature that is associated with undesired network behavior with the contents of the network packets. In response to the at least one threat signature matching the contents of at least one of the network packets, an intrusion alert is transmitted to the BMC.

Abstract: A method, video processing system, and information handling system (IHS) provides rendering of video data. The method includes triggering a management controller to generate a virtual monitor that is accessible by a host. The method further includes, in response to the processor writing video data to the video driver, the video data is converted to bulk video data. The bulk video data is transmitted to the management controller, and the management controller causes a virtual monitor driver corresponding to the virtual monitor to convert the bulk video data to a re-converted video data.

Abstract: A method, video processing system, and information handling system (IHS) provides rendering of video data. The method includes triggering a management controller to generate a virtual monitor that is accessible by a host and enabling, via a processor of the host, at least one graphics processing unit (GPU). The method further includes determining if a processor is writing video data to a video driver. In response to the processor writing video data to the video driver, the video data is converted to bulk video data. The bulk video data is transmitted to the management controller.

Abstract: A method, video processing system, and information handling system (IHS) provides rendering of video data. The method includes triggering a management controller to generate a virtual monitor that is accessible by a host and enabling, via a processor of the host, at least one graphics processing unit (GPU). The method further includes determining if a processor is writing video data to a video driver. In response to the processor writing video data to the video driver, the video data is converted to bulk video data. The bulk video data is transmitted to the management controller.

Abstract: A system comprises a first node, which comprises a first controller. The first controller is operable to access a set of files that are stored within a drive of the first node and configure the first node based on the set of files. The first controller is further configured to receive, from a second controller, a first message requesting access to the drive comprising the set of files. The second controller may be within a second node, which is different than the first node. In response to receiving the first message, the first controller transmits a second message to the second controller allowing the second controller to access the drive in the first node comprising the set of files by emulating the partition to configure the second node. The first controller is further configured to transfer the set of files to the second controller after transmitting the second message.