Abstract: A storage area network push install performs SAN agent installation on a plurality of hosts according to a host install list. The target hosts may employ different operating systems, or platforms, and the installer selectively copies an install kit corresponding to the operating system on the target host The install kit includes an agent specific install script for identifying agent specific parameters on the target host. The installer initiates and remotely responds to the execution of the install script, or configuration script, in lieu of manual intervention by an operator, to provide the agent specific parameters for the agents being installed on the target host. The execution of the install script generates an agent initialization file for installing the agents in the appropriate locations on the target system. The agent initialization file establishes folders for locating the agent executable files and associated support files, as well as other runtime parameters.

Abstract: This invention is a system and a method for operating a storage server to provide read or write access to a data in a data network using a new architecture. The method of creating virtual block mapping pointer in response to a request by a client of the storage server to de-duplicate the file system data block or to allow compression of one or more file system data blocks into one or more physical data blocks. Further, the method relocates one or more file system data blocks from one part of the file system address space to another by using one or more virtual block mapping pointers that provides the mapping information for the one or more file system data blocks that are being relocated. The virtual block mapping pointer allows relocating of file system data blocks by same number of metadata operations regardless of number of files sharing the block that are being relocated and the state of those blocks (compressed or not).

Abstract: A data storage architecture for networked access by clients includes a file server capable of communication with the clients via the network, physical storage organized as a plurality of logical volumes, and an encryption device in communication with both the file server and the physical storage. The encryption device is operable in response to signaling from the file server, including an indication of a range of blocks of data, to cause encryption of the range of blocks with an encryption key that is unique within the physical storage. The encryption device includes nested tables mapping block ranges to encryption keys. Consequently, undesirable key sharing across files, file systems, and other units can be avoided down to the block level.

Abstract: A system determines status of agent execution of a command in a network. The system identifies a command to be performed by an agent and issues the command to the agent for execution. The agent operates a status manager that tracks execution status of commands in the agent. The system sends status requests to the agent to determine a status of execution of the command by the agent and the agent responds and sends a status response indicating the status of the execution of the command by the agent. Applications are thus provided with current status of execution of long running commands in an agent.

Abstract: A data storage architecture for networked access by clients includes a file server capable of communication with the clients via the network, physical storage organized as a plurality of logical volumes, and an encryption device in communication with both the file server and the physical storage. The encryption device is operable in response to signaling from the file server to cause encryption of data being moved into the physical storage, and decryption of data being retrieved from storage. Two logical paths are provided for I/O operations. A first path is reserved for use by a first type of requestor, such as file owners. Data retrieved via the first path is decrypted by the encryption device, and Writes via the first path are allowed. A second path is employed for others than the owners, e.g., administrators. Data retrieved via the second path is not decrypted by the encryption device, and attempted Writes via the second first path are denied.

Abstract: A method, and computer program product for computing a change plan are presented. A model of a current configuration is identified, the model including modeled system assets and modeled tasks. A request to change the current configuration to a new configuration is received. The request to change the current configuration to generate a plurality of valid strategies to be used in a genetic programming parse tree corresponding to modeled assets and modeled tasks of said model is applied to the model. The request to change the current configuration is applied to at least one of said valid strategies to generate a plurality of potential change plans. The change plans are evolved according to genetic programming principles to a preferred change plan.

Abstract: A method and apparatus are provided for assigning/obtaining enclosure identification numbers in a distributed switch storage system. The method takes advantage a network topology wherein one port on the switch is always used as a downstream connection (towards a control station) and one always used as an upstream connection (away from the control station). Using single-hop type packets an assignment arbitration protocol ensures that each enclosure is assigned a unique and predictable Enclosure ID.

Abstract: A software trusted platform module (sTPM) operates in a hypervisor, receives trust assurances from specialized hardware, and extends this trust such that the hypervisor performs trust attestation. The hypervisor receives a startup sequence validation from a TPM, or Trusted Platform Module. The TPM performs bus monitoring during a boot sequence of the computer system, records the startup sequence from the bus, and performs a hash on the sequence. The TPM performs an authentication exchange with the hypervisor such that the hypervisor authenticates the attestation of the computer system from the TPM, and the hypervisor, now delegated with trust assurances from the TPM, provides assurances to users via an authentication chain. The ATCB then performs the attestation of the computer system according to the attestation protocol much faster than the TPM. In this manner, the hypervisor operates as a software delegate of the TPM for providing user assurances of trust.

Abstract: A method, system, and a computer program product for debugging a software system. An aspect of the present invention provides a user with the combination of an error determined in the software system and a set of recommendations for fixing the error, thereby enabling the user to debug the software system more efficiently. In one embodiment, the error is determined by inspecting the execution states of the software system at different time instances prior to receiving a debug indication from the user. The set of recommendations for fixing the error is identified by searching a knowledge base that stores the recommendations (e.g., possible solutions, suggestions, and workarounds) for each of the errors.

Abstract: A method is used in managing loop interface instability. It is determined that a loop has excessive intermittent failures. It is determined, based on whether the intermittent failures are detectable on another loop, whether the cause of the excessive intermittent failures is within a specific category of components. A search procedure is executed that is directed to the specific category of components, to isolate the cause of the excessive intermittent failures.

Abstract: A method, article of manufacture, and apparatus for tracking a plurality of objects being stored are disclosed. In an embodiment, this comprises computing the hash value of the name of each object being stored, setting the corresponding bits in a bitmap, and storing the bitmap as a hint in an index. The size of the bitmap is determined by the space available for storing the hint, and the range of hash values is determined by the size of the bitmap. The range may be determined by choosing a prime number smaller than the space available for storing the bitmap. Either the hint or the longest pathname containing the objects can be stored, and this may be selected based on the application.

Abstract: A method, article of manufacture, and apparatus for tracking a plurality of objects being stored are disclosed. In an embodiment, this comprises concatenating at least a portion of the name of each object being stored into a hint; and storing the hint in an index. The portion of the name is the entire name, the first n characters, the last n characters, or every nth character, and this may be selected based on the application associated with the objects. Either the hint or the longest pathname containing the objects can be stored, and this may be selected based on the application.

Abstract: A method is used in application aware cache management. A cache management policy is received including one or more sets of device generic application best practices and one or more sets of device specific best practices. Initial cache configuration processing is performed in connection with configuring a cache of a data storage system. The cache management policy is used in performing the initial cache configuration processing. Storage objects are identified as being in use by an application. Ongoing cache configuration processing is performed in connection with configuring the cache of the data storage system for use with the storage objects.

Abstract: A method is used in managing storage pool provisioning. One or more physical devices of a data storage system is configured for use in connection with provisioning a storage pool. A provisioning specification is received describing a RAID type and capacity. A rule is received describing one or more sets of data storage system best practices. Each of the one or more sets specifies data storage system best practices for a different type of data storage system including a first type associated with the data storage system. Configuration processing is performed in connection with initialization of the data storage system to configure a first portion of the one or more physical devices for use with the storage pool. A rules engine and best practices for the first type of data storage system specified in the rule are used in performing the configuration processing.

Abstract: Embodiments of the invention relate to controlling access to a content unit stored on an object addressable storage (OAS) system. In one embodiment, the content unit may have an object identifier that is used to identify it on the OAS system. A first portion of a content unit may be assigned a first set of access permissions and a second portion of the content unit may be assigned a second set of access permissions that is different from the first set of access permissions.

Abstract: An apparatus and method are described for defining, maintaining and displaying a checkpoint result set to facilitate identification of desirable checkpoints during system recovery. The checkpoint result set may be mapped to a user-customizable namespace. The user customizes the namespace by selecting one or more characteristics of desirable file system checkpoints. Being able to customize the namespace in this manner enables the user to be provided a more streamlined checkpoint result set in the event of data corruption. As a result an appropriate checkpoint can be more quickly selected for use in recovery.

Abstract: A data packet arbitration system for routing data transfers from a plurality of clients to a data transmission line is described. The system includes multiple arbitration stages for transferring data from the plurality of clients to the data transmission line. Data transfers are routed through the system based on arbitration logic that prioritizes by function in a primary arbitration stage and by client in a subsequent arbitration stage.

Abstract: Embodiments of the invention relate to determining the lineage of a content unit stored on an object addressable storage (OAS) system. When a content unit that is derived from at least one other content unit is stored on an OAS system, metadata that identifies the source content unit(s) from which the at least one content unit was derived may be stored. This metadata may be subsequently used to determine the lineage of the content unit.

Abstract: A method is used in securely erasing flash-based memory. A new version of data is received for a logical location of a flash-based memory. An old version of the data of the logical location is stored in a first physical location in the flash-based memory. The old version of the data is caused to be subject to an obscure operation. The new version of the data is caused to be stored in a second physical location in the flash-based memory.

Abstract: A method, system, and a computer program product for improving IO (input/output) performance of host systems using external storage systems. An aspect of the present invention predicts policies to be applied in the host system based on historical information. Several characteristics of a set of IO requests sent by a host system are collected and analyzed to determine a usage/IO pattern. A suitable policy is then determined based on the pattern and applied on the host system when a similar pattern of IO requests is sought to be sent again, thereby improving the IO performance of the host system.