Abstract: An information handling system may include at least one processor and a memory. The information handling system may be configured to receive a request to upgrade a component from a first version to a second version; perform a first check by determining if allowed source release (ASR) information of the second version includes a reference to the first version; perform a second check by determining if allowed target release (ATR) information of the first version includes a reference to the second version; and in response to either of the first check and the second check being successful, perform the component upgrade.

Abstract: An embedded controller (EC) of an information handling system is configured to detect and respond to anomalous conditions in which a pre-boot or runtime error has occurred and EC-local storage resources are not sufficient to store EC telemetry data, by redirecting the EC telemetry data through an available communication channel, e.g., SBIOS MBOX packets or ACPI MMIO, to offload the data to EC-external storage such as an ESP partition or Cloud storage. In a pre-boot mode, SBIOS may invoke a UEFI storage driver to write out EC log data to EC-external storage, e.g., SSD/NVMe device or the Cloud. In a runtime mode, the EC may be flagged by an OS bugcheck handler, e.g., via eSPI MMIO path, to save the log data. In an OS-context mode, ACPI methods may notify a persistent driver, e.g., Common Platform Services (CPS) driver, to write out the log to the EC-external storage.

Abstract: In at least embodiment, processing can include: receiving virtual utilizations (VUs) for resources consumed in connection with recording entries in a log for commands or operations, wherein each resource has a corresponding VU which denotes a number of allocated units of the resource associated with entries of the log which have not been flushed from the log; determining a first resource having a maximum VU with respect to VUs of consumed resources; determining whether the maximum VU is within an acceptable VU range, wherein the acceptable VU range has bounds determined in accordance with a maximum deviation threshold associated with the first resource; and responsive to determining the maximum VU is not within the acceptable VU range of the first resource, performing one of a plurality of regulation actions that varies an amount of a system resource to accordingly vary a flush rate of entries from the log.

Abstract: An information handling system may include a processor, a touchpad communicatively coupled to the processor, and non-transitory computer-readable media communicatively coupled to the processor and having stored thereon a program of instructions configured to, when read and executed by the processor in response to a trigger for enabling logical segmentation of the touchpad, logically segment the touchpad into a plurality of zones and map each zone to a respective corresponding feature displayed on one or more displays communicatively coupled to the processor such that user interaction with each of the plurality of zones manipulates the respective corresponding feature of such zones on the one or more displays.

Abstract: In a multi-tiered system, a read temperature classification and write temperature classification per virtual block (VLB) can be determined based on the content referenced by each VLB. The temperature classifications of VLBs can be determined using temperature scales which map read and write activity levels to corresponding temperature classifications. The temperature scales can have classification boundaries adjusted based on feedback of operations performed including down-tiering, garbage collection, and compaction and appending. In one use case, a number of free blocks in a high-performance first tier can be below a minimum and processing can be performed to locate a source block of the first tier partially filled with hot content, store the hot content contiguously on a target block of the first tier, flush write data from a log, and store the write data on the target block by appending the write data to the existing hot content.

Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include a Baseboard Management Controller (BMC) having computer-executable instructions to receive a request to boot a factory firmware on the BMC in which the factory firmware is signed by a first private key of a first asymmetric private/public key pair. Using the first private key, the instructions verify an authenticity of the factory firmware using a public key associated with the first private/public key pair, and allow booting of the factory firmware only when it is authenticated by the first public key.

Abstract: Systems and methods are provided for vulnerability proofing updates to an IHS (Information Handling System). An update system receives a notification of an update including updated configurations for hardware components of the IHS. The update system queries the IHS for vulnerability proofing requirements for updates that modify configurations of hardware components of the IHS. In response to the query, vulnerability proofing requirements are retrieved from a persistent data storage of the IHS and transmitted to the update system, where the vulnerability proofing requirements specify catalogs of known vulnerabilities of hardware components. The update system determines whether the updated configurations are identified as vulnerable in the one or more of catalogs. If the updated configurations are not identified in the catalogs, the update is transmitted to the IHS. If configurations from the update are identified in the catalogs, the update is terminated and the IHS is notified.

Abstract: Systems and methods are provided for vulnerability proofing the use of risk scores in the administration of hardware components of an IHS (Information Handling System). Proposed configurations for a first of the hardware components of the IHS are detected, where the proposed configurations are associated with a risk score. Catalogs specifying known vulnerabilities of hardware components are accessed and used to determine whether any of the proposed configurations of the first hardware component are identified as vulnerable in one or more of the catalogs. When a vulnerability for the proposed configuration is identified in the catalogs, the risk score of the configuration is increased based on the vulnerabilities identified in the plurality of catalogs. When the risk score is increased to an elevated level, the hardware component is disabled until the proposed configurations are changed to include no configurations with vulnerabilities identified in the catalogs.

Abstract: Systems and methods are provided for vulnerability proofing an IHS (Information Handling System) while being administered using a bootable image. Launching of a bootable image by the one or more CPUs is detected and one or more IHS configurations to be made using the bootable image are identified. One or more catalogs specifying known vulnerabilities of hardware components are accessed and used to determine whether any of the IHS configurations to be made using the bootable image are identified as vulnerable in one or more of the catalogs. Configuration of the IHS using the bootable image is blocked until the configurations to be made using the bootable image are modified to include no configurations with vulnerabilities identified in the plurality of catalogs.

Abstract: Systems and methods are provided for vulnerability proofing the launching of application instances by an IHS (Information Handling System). The launching of an application instance on the IHS is detected, where the application instance is launched using an application template that includes configurations for one or more hardware components of the IHS. One or more catalogs are accessed that specify known vulnerabilities of hardware components. Hardware component configurations included in the application template are identified as vulnerable in one or more of the catalogs. If the application template includes configurations that are identified as vulnerable in the catalogs, launching of the application is prevented until the hardware component configurations within the application template are modified to include no configurations with vulnerabilities identified in the catalogs.

Abstract: A method for use in a computing system, comprising: outputting, by the computing system, a product configuration menu that specifies a first set of product components; outputting, by the computing system, information associated with a first product, the first product including the first set of product components; detecting, by the computing system, a user input that specifies a second set of product components, the user input being received via the product configuration menu; selecting, by the computing system, a second product that includes the second set of product components, the second product being selected by performing a search of a product distance data structure to identify a plurality of candidate products that include the second set of product components, obtaining a respective product distance score for the first product and each of the plurality of candidate products, and selecting one of the candidate products as the second product.

Abstract: A computing device includes a bezel and an enclosure. The bezel includes an air circulation component and a heater apparatus. The enclosure includes a plurality of hardware components, and the bezel is affixed to a frontside of the enclosure and configured to heat an internal volume of the enclosure.

Abstract: An information handling system communicates with external devices, such as a docking station, through a multi-protocol streaming cable, such as USB 3.0 (or greater) cable having a USB data protocol, a DisplayPort graphics protocol and a power transfer protocol. Upon detection of excessive errors at the cable, the multi-protocol stream is adjusted to maintain errors within an acceptable range and prioritize information transferred through one of the protocols. Adjustments may include changes to the number of data lanes assigned to each protocol, changes to the rate at which information is transferred with each protocol and changes to power transfer.

Abstract: A zoned namespace storage device system includes a zoned namespace storage device coupled to a computing device. The zoned namespace storage device includes a zoned namespace storage subsystem that is configured to store data, and storage device compute hardware that is coupled to the zoned namespace storage subsystem and that is configured to provide a storage device operating system that includes a storage device management microservice. The storage device management microservice presents a non-zone storage service to a host subsystem in the computing device and receives, via the non-zone storage service presented to the host subsystem, a storage command from the host subsystem that is associated with a storage operation. The storage device management microservice then utilizes a zone storage service presented to the storage device management microservice by the zoned namespace storage subsystem to perform the storage operation on the zoned namespace storage subsystem.

Abstract: A system for detecting contamination in a two-phase immersion cooling system based on temperature differences between component surface temperature and fluid temperature, a previous component surface temperature and a present component surface temperature and a component surface temperature and a component surface temperature threshold value. Large differences between the component surface temperature and the fluid temperature or between the component surface temperature and a previous component surface temperature or a component surface temperature exceeding a component surface temperature threshold value may indicate contaminants in the fluid that are inhibiting the ability for the component to effectively transfer heat to the fluid. A temperature monitoring system may monitor the temperatures and communicate with a service system to apply corrective measures before the residue can cause significant damage to an information handling system.

Abstract: A system can comprise a radio unit comprising a digital front end, wherein the digital front end comprises a group of tap points that are configured to receive a first custom signal. The system can also comprise a first component that is configured to originate the first custom signal. The system can also comprise a second component that is configured to select a first tap point of the group of tap points, and inject the first custom signal into the first tap point.

Abstract: Facilitating the generation of ephemeral credentials and verification thereof within a distributed storage system is provided herein. Based on a request for ephemeral credentials from a first account client to a first node of a first storage instance of a distributed system, generating the ephemeral credential comprising a session token and a secret session key for the first account client by a method that derives the secret session key using a first account private key and a first storage instance public key. This session token along with a signature generated using the secret session key of the ephemeral credential is subsequently used to make further requests to a second node of a second storage instance of the distributed system where the secret session key is independently derived using information in the request and the previously shared first account private key to verify the signature in the request.

Abstract: Storage array health scores based on alerts are auto-corrected by using alert validation and alert matching to identify missed, stale, and redundant alerts. In response to restoration of an event daemon or reboot of a storage management server, each alert associated with each storage array is validated to determine whether current state of storage array hardware or a logical object differs from the state indicated in the alert. Alerts that differ from current state are updated or invalidated and the health score is recalculated. Responsive to receipt of a new alert, existing alerts associated with the same storage array hardware or logical object are identified and Jaro-Winkler distance between the identified alerts and the new alert is calculated. Any existing alert for which the Jaro-Winkler distance relative to the new alert is greater than or equal to 0.9 is deleted and the health score is recalculated.

Abstract: An information handling system with modular riser components for receiving expansion cards having various requirements. The system includes a riser body assembly having a common support structure for receiving expansion cards. The common support structure may be coupled to different expansion structures to provide support of expansion cards having requirements that would not be met by the common support structure alone.