Abstract: Automating Information Handling System (IHS) hardening optimization includes retrieving, from a plurality of IHS hardening configurations, an initial IHS hardening configuration and hardening an IHS based on the initial hardening configuration. An IHS hardening verification tool is then run to verify that the IHS is in compliance with a compliance checklist, if it is, end-to-end tests are run on the IHS, and upon passing the end-to-end tests the initial hardening option is determined to be the best hardening option for the IHS. However, in response to the IHS not passing the end-to-end tests, a next IHS hardening configuration is retrieved and the IHS is hardened based on the next hardening configuration. Running the hardening verification tool and end-to-end tests on the IHS and retrieving a further IHS hardening configuration and hardening the IHS based on the further hardening configuration is repeated, until the IHS passes the end-to-end tests.

Abstract: A data processing system comprising a processor having a working memory and processing logic, a boot system configured to load one or more algorithms for initializing a basic input output system (BIOS) of the processor into the working memory and an error correction system configured to start a watchdog timer and to monitor initialization of the processor, the error correction system further configured to implement a corrective process if the watchdog timer times out prior to initialization of the BIOS of the processor.

Abstract: Receipt of an Xcopy command to copy data between storage objects that are both mirrored by a remote storage system prompts a local storage system to generate a remote Xcopy to prompt the remote storage system to copy the data between the remote mirrors of the storage objects, thereby avoiding transmission of the data from the local storage system to the remote storage system. If there are write-pendings or invalids on the tracks designated by the local Xcopy, then the associated data is sent to the remote storage system. Similarly, the associated data is sent if the code levels of the local and remote storage systems are incompatible.

Abstract: Described is a system for management of specialized files used for a backup restore. The system may allow for an automated recovery to be performed without having to manually identify critical information required to perform a restore of a particular backup within a backup chain. This information may include a control file and a parameter file. A backup agent may store such information within specialized objects that are stored as part of metadata managed by a backup agent to provide an additional layer of recover capability and efficiency. This information may then be leveraged for retrieval during a restore operation, for example, in a disaster recovery scenario.

Abstract: Aspects of this disclosure improve data availability by decreasing access times to obtain data from the storage device while still providing high memory density. A method may include identifying, by a controller of a non-volatile solid-state storage device, first data that matches a criteria based on access information regarding data stored in a solid state drive as targeted data; writing, by the controller of the non-volatile solid-state storage device, the targeted data from a first portion of the non-volatile solid-state storage device configured as a first type to a second portion of the non-volatile solid-state storage device configured as a second type; and tagging, by the controller of the non-volatile solid-state storage device, the data with a tag based on the access information. Other aspects are also disclosed.

Abstract: Template based automatic recovery of virtual machine guest operating systems is provided, that is configured to execute recovery operations within a virtual machine in response to generation of dial-home messages. The error recovery operations, in some embodiments, are based on error recovery templates that specify dial-home event specific sequences of diagnostic operations and actions to be taken to attempt to recover from the errors that cause the dial-home events. By enabling the virtual machine to internally recover automatically from at least a subset of dial-home errors, it is possible to greatly reduce the support cost associated with providing support services for maintaining operation of storage systems. Additionally, enabling automatic recovery of particular errors can reduce the amount of time the storage system or particular aspects of the storage system are inoperable, thus increasing the reliability of the storage system.

Abstract: Techniques for device modification analysis are disclosed. For example, a method comprises collecting operational data from one or more devices, and receiving one or more modifications to at least one of firmware and software for the one or more devices. In the method, one or more virtual instances of respective ones of the one or more devices are generated, and the one or more modifications are tested on the one or more virtual instances to determine if there are one or more issues with the one or more modifications.

Abstract: Techniques for detecting a modification to a configuration of a system are disclosed. For example, a method comprises the step of collecting a first data set for a system at a first time instance, wherein the first data set comprises inventory data for a configuration of the system present at the first time instance. The method compares the first data set to a second data set, wherein the second data set comprises inventory data for a configuration of the system present at a second time instance. The method obtains a third data set based on the comparison of the first data set and the second data set, wherein the third data set comprises data indicative of any differences between the inventory data for the configuration of the system present at the first time instance and the inventory data for the configuration of the system present at the second time instance.

Abstract: A testing method accesses tracing data comprising a plurality of tracing records corresponding to a plurality of test cases executed on a target system. The target system includes a plurality of microservices configured in accordance with a REST API. A dynamic test analyzer accesses the tracing data and imports a definition of the REST API. The analyzer checks each tracing record for consistency with the API definition. Based on this checking of the tracing records, one or more coverage metrics may be calculated. If any one or more of the one or more coverage metrics fails to exceed a threshold coverage, a testing action may be required. In some cases, the testing action may be selected from either seeking additional coverage of the APIs included in the target system or seeking additional test result coverage.

Abstract: A snapshot is taken of at least a portion of a file system having a set of files to retain over a retention duration. The snapshot is taken at a level of the file system or a directory of the file system. A retention lock is applied to the snapshot to block, over the retention duration, operations involving deletion of the snapshot. The retention lock is not applied to the set of files.

Abstract: An information handling system includes a compute express link (CXL) device coupled to a processor by a PCIe/CXL link. The processor initiates a link training on the PCIe/CXL link, determines that the PCIe/CXL link failed to train to a CXL link signaling rate, trains the PCIe/CXL link as a PCIe link in response to determining that the PCIe/CXL link failed to train to the CXL link signaling rate, and operates the CXL device as a PCIe device only in response to training the PCIe/CXL link as a PCIe link.

Abstract: Techniques described herein relate to a method for performing data protection of file system data on a host. The method includes obtaining a data access request for a file corresponding to a placeholder file from an application during a backup access session; obtaining, in response to the data access request, file system data associated with the file from a backup storage using backup metadata associated with the placeholder file; providing the file system data associated with the file to the application; making, after the providing, a determination that the file is modified by the application; and in response to the determination: flagging the placeholder file.

Abstract: In accordance with one or more embodiments of the invention, a method is provided for re-tiering files and folders located in a cloud-based file system without crawling all the files and folders in the cloud-based file system. The method utilizes the meta-data for the files and folders to determine, based upon provided rules, which tier a file or folder should be assigned to. By utilizing the meta-data, the use of expensive cloud resources may be minimized when there is a need for re-tiering the files and folders into appropriate cloud tiers.

Abstract: The meta data containing count and key fields of CKD records are reversibly decoupled from the user data of the data field so that the data can be deduplicated. Multiple CKD records may be coalesced into a larger size CKD track. The coalesced meta data is compressed and stored in a CKD hash table. The user data is hashed, and the hash is used as a hash key that is associated with the compressed meta data in the CKD hash table. When the hash of user data associated with a CKD write IO matches the hash key of an existing entry in the table, data duplication is indicated. The compressed meta data is added to the entry and the user data is deduplicated by creating storage system meta data that points to the pre-existing copy of the user data. The storage system metadata includes unique information that enables the corresponding compressed metadata to be subsequently located in the hash table to reassemble the CKD records.

Abstract: A method may include enabling operation of a time of flight (TOF) proximity sensor at an information handling system and initializing execution of a software service. The method may further include receiving, at the software service, an alert signal from the TOF proximity sensor indicating movement proximate to the information handling system. In response to receiving the alert signal, a camera at the information handling system may be configured to capture an image. The image may be analyzed by a vision system coupled to the camera to determine a gaze direction of a user at the information handling system. Operation of the information handling system may be configured based on the gaze direction.

Abstract: A drive subsystem engages in data communication with a storage controller by establishing first and second communication ports, wherein the second port is configured for decryption and forwarding of decrypted communications to the first port. The drive subsystem receives and processes data communications having selective encryption and identification of target port, by (1) for a security command containing secret data (e.g. a passphrase) enabling operation of a target drive, receiving the security command at the second port, decrypting the security command and forwarding it to the first port for delivery to the target drive, and (2) for data commands by which the storage controller stores and retrieves data to/from the target drive, receiving the data commands in non-encrypted form at the first port directly from the storage controller for delivery to the target drive.

Abstract: The described technology is generally directed towards adaptive spectrum as a service, in which spectrum can be dynamically allocated to adapt to demand for wireless capacity. The demand for wireless capacity can be based on monitoring system state, and/or proactively predicted based on other system state such as time of day. Reallocated spectrum can be monitored for performance, to converge spectrum allocation to a more optimal state. Allocated spectrum can be relocated, increased or decreased, including by the use of citizens band radio service spectrum or other spectrum. Currently allocated spectrum can be adapted into modified allocated spectrum by an application program (xApp) coupled to a radio access network intelligent controller (RIC), a citizens broadband radio service device, a domain proxy service, and/or a user device.

Abstract: An information handling system determines a difference between a first set of initialization information and a second set of initialization information during a pre-extensible firmware interface initialization phase of a boot process that is based on a first basic input/output system (BIOS), wherein the first set of initialization information is associated with the first BIOS and the second set of initialization information is associated with a second BIOS. The system also creates and publishes a hand-off block that includes an entry which describes the difference between the first set of initialization information and the second set of initialization information. The system parses the hand-off block during a driver execution environment phase to determine the difference between the first set of initialization information and the second set of initialization information, wherein the hand-off block is passed from the pre-extensible firmware interface initialization phase of the boot process.

Abstract: A request to perform a first operation in a system that stores deduplicated data can be received. The system can include a data block stored at multiple logical address each referencing the data block. A reference count can be associated with the data block and can denote a number of logical addresses referencing the data block. Processing can be performed to service the request and perform the first operation, wherein the processing can include: acquiring a non-exclusive lock for a page that includes the reference count of the data block; storing, in a metadata log while holding the non-exclusive lock on the page, an entry to decrement the reference count of the data block; and releasing the non-exclusive lock on the page.

Abstract: A system and method are disclosed for delegating, by a resource-constrained device, a privilege to a basic input/output system, wherein the privilege allows the basic input/output system to authenticate an endpoint device on behalf of the resource-constrained device. The system and method also includes generating an asymmetric security key that includes a private key and a public key and transmitting the public key to the basic input/output system, wherein the public key is included in a proxy certificate generated by the basic input/output system. In addition, the system and method includes establishing a secure session between the basic input/output system and the endpoint device using the private key and the proxy certificate, wherein the secure session is used by the basic input/output system to authenticate and verify that the endpoint device is authorized to perform an operation.