Abstract: An information handling system operating a 5G network slice hub service system may comprise a wireless wide area network (WWAN) interface device transceiving data with a radio access network (RAN) within a RAN network slice, a wireless local area network (WLAN) interface device transceiving data with an endpoint computing device, a processor instructing a software defined network (SDN) controller to route data transceived within a set of RAN network slices at the WWAN interface device to be extended via a subset of radio frequencies designated for one or more endpoint device at the WLAN interface device by the SDN controller to the one or more endpoint devices, and routing data on the extended RAN network slice between the endpoint device and the WWAN interface device interfacing with the RAN.

Abstract: An edge device is disclosed and includes a processor, a memory, and a power management unit (PMU). The processor executes code instructions of an edge throughput services management system for managing a wireless network and one or more devices operatively coupled to the wireless network and the edge device. The processor detects a number of managed client information handling systems operatively coupled to the edge device; creates a persona associated with each of the managed client information handling systems; conducts an inventory of one or more applications requiring network access associated within each persona; prioritizes each persona for network access; and prioritizes each application associated with each persona for network access. The edge throughput services management system to provide a service for monitoring and recommending adjustments to the wireless network and managed client information handling systems for flexible data bandwidth access to the wireless network.

Abstract: Systems and methods for managing persistence in workspaces are described. The system for managing workspaces includes computer-executable instructions for instantiating a workspace in response to receiving a login request, creating a base OS layer in the workspace, and installing one or more applications onto the base OS layer in which the applications have been installed on the workspace of a previous login session. The system may then virtually map application data to the memory of the workspace to be used by the applications in which the application data was generated by the applications during the previous login session of the workspace.

Abstract: Systems and methods are provided for prioritizing system memory for separate isolated computing workspaces (e.g., cloud-based software containers) that are executing together on an information handling system by reallocating higher performance system memory to higher-ranked computing workspace/s. In one example, the disclosed systems and methods may be implemented to optimize system memory usage for memory-heavy heterogeneous workloads of workspaces that are simultaneously executing together as modern clients on an information handling system.

Abstract: An information handling system includes a virtual interface configured to provide communication between an agent and an embedded controller, wherein the virtual interface is located below a kernel space of the information handling system. The agent may be configured to transmit telemetry data published by the embedded controller to a data repository, wherein the agent is located at a user space of the information handling system. The embedded controller publishes telemetry data to the data repository via the virtual interface through the agent.

Abstract: Embodiments of systems and computer implemented methods are provided to transfer software licenses and entitlements associated with a user account from a first information handling system (IHS) to a second IHS. A computer implemented method in accordance with the present disclosure may generally include executing an entitlement management service to reassign the software licenses and entitlements associated with the user account to the second IHS, executing at least one local validation service on the second IHS to validate the second IHS and the user's workspace, and if the second IHS and the user's workspace is successfully validated by the at least one local validation service, executing one or more cloud-based orchestration services to verify the user account, determine which software licenses and entitlements are associated with the user account, and acquire and validate the software licenses and entitlements before transferring the software licenses and entitlements to the second IHS.

Abstract: In one or more embodiments, one or more systems, one or more methods, and/or one or more processes may: execute a first application within a first operating system (OS) virtualization on a first information handling system (IHS); suspend the first application at a point of execution; determine one or more statuses associated with the first application, in which the one or more statuses includes the point of execution where the first application was suspended; provide the one or more statuses to a second IHS; configure a second application and a second OS virtualization with the one or more statuses associated with the first application within the first OS virtualization; establish input/output associated with the second application with one or more components of the first IHS via the network; and execute the second application within the second OS virtualization on the second IHS at the point of execution.

Abstract: An information handling system comprising a processor, a memory device, and a power management unit (PMU). The processor to execute computer readable program code of an interim edge storage management system, the processor operatively coupled to a client device, an edge storage device, and a plurality of remote network file hosting systems managed by the interim edge storage management system, wherein the interim edge storage management system includes a storage orchestrator to manage data storage of the client device at and access to the edge storage device and the plurality of remote network file hosting systems based on recency of usage of files to be stored.

Abstract: Systems and methods for providing a workspace Root-of-Trust (RoT) are described. In an embodiment, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to receive a digital certificate from each of a plurality of peripheral devices coupled to the IHS in a workspace and combine at least portions of the digital certificates to create a workspace certificate unique to the workspace.

Abstract: An information handling system includes a virtual trusted platform module (TPM) consumer associated with a virtual machine. The virtual TPM (vTPM) consumer may consume TPM services from a clustered vTPM domain service and determine the connection information of the vTPM domain service. The vTPM consumer transmits a connection request for a TPM operation request to the vTPM domain service, wherein the connection request includes a payload in addition to the connection information. The consumer may also receive a response associated with the TPM operation request from the vTPM domain service.

Abstract: An information handling system may validate a connection request received from a trusted platform module (TPM)-virtual (vTPM) module according to a policy, wherein the connection request originated from a virtual machine associated with the TPM-vTPM module which consumes services from a clustered vTPM domain service. In response to determining that the connection request is valid based on the policy, the system may determine the vTPM domain service associated to the TPM-vTPM module, and determine whether to route or redirect the connection request according to policy. In response to determining that the connection request is to be redirected, the system may transmit a response to the TPM-vTPM module, wherein the response includes redirect information to the vTPM domain service. In response to determining that the connection request is to be routed, the system may route the connection request to the vTPM domain service.

Abstract: Various embodiments of information handling systems and related methods provide a secure platform control point, which enables cloud-native applications to access the local hardware resources and platform capabilities of the information handling system. The embodiments disclosed herein provide the same level of security, manageability and compute/intelligence for cloud-native applications, as endpoint-native applications run locally on the information handling system.

Abstract: Run-time attestation of a workspace including deploying, at a client information handling system, an application broker, the application broker including a model that defines characteristics of a computer-implemented application accessible through a server information handling system; establishing a trust relationship between a control vault system of the client information handling system and the server information handling system; provisioning entitlements, by the application broker, that are associated with the computer-implemented application at the client information handling system; identifying an execution of the entitlements at the client computing device, and comparing the execution of the entitlements with the model; determining, based on the comparing, a violation of the model, and in response, procuring a trust challenge from the server information handling system; generating, by the application broker and in response to the trust challenge, an attestation of the trust relationship between the con

Abstract: An information handling system may determine a personality flag value during a boot process, and execute a system update handler configured for connecting to a control plane. The system may also provision a software application in a current operating system environment or erase the existing operating system and provisional new environment including receiving the software application responsive to a secure profile and validating the software application prior to loading.

Abstract: An information handling system may determine a personality flag value during a boot process and execute, responsive to detecting that the information handling system entered a secure environment and based on the personality flag value, a system update handler configured for discovering and connecting to a control plane. The system may also provision a secure ephemeral operating system, including receiving an image of the secure ephemeral operating system from the control plane responsive to a secure profile and validating the image prior to loading the secure ephemeral operating system to a random access memory.

Abstract: Systems and methods are provided that may be implemented in one example to physically transfer or relocate information handling systems between facilities of different system owners in a manner that is downstream of the original equipment manufacturer (OEM) of the transferred information handling system/s, and which in one example may be managed in part or in whole by the OEM’s customer base. In conjunction with facilitating physical transfer of each given information handling system directly between different enterprise owners, the disclosed systems and methods may also be implemented at the same time to utilize a unique identifier (that is assigned by the OEM manufacturer to each given information handling system) to manage transfer of the registration or other type of association of the given information handling system assets between the enterprise OEM user accounts of the different enterprise owners that are maintained by an OEM of the information handling system assets.

Abstract: Systems and methods for classifying network traffic to use cellular network slices based on application parameters are described. In some embodiments, an Information Handling System (IHS) may include: a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to: receive a plurality of packets originated by a single application; classify each of the plurality of packets into one of a plurality of network slices based upon network parameters of the application, where each of the network slices is associated with a weight, and for each given packet among the plurality of packets, add a weight to a header portion of the given packet, where the weight corresponds to the given packet's classification.

Abstract: An information handling system including a port or wireless antenna to operatively couple one or more peripheral devices to the information handling system and the processor executing code instructions of a peripheral devices reporting module for managing the one or more peripheral devices in coordination for a remotely-located peripheral device management system, wherein the processor is configured to generate a manifest of the information handling system and the one or more peripheral devices, and a network interface device to transmit to the remotely-located peripheral device management system the manifest to be associated a user account for peripheral device management services utilize usage data from the one or more peripheral devices to monitor peripheral device usage lifecycle status or peripheral device health status.

Abstract: A method of securing functionalities of an integrated subscriber identification module (iSIM) on an information handling system may include with an embedded controller (EC), detecting a powering-up process at the information handling system and determine a chain of trust access keys during bootup; with the execution of the EC, detecting and activating a wireless wide area network (WWAN) module; with the execution of the EC, detecting and accessing an integrated subscriber identity module (iSIM); with the execution of the EC, authenticating access to iSIM content including authorization information and carrier profile information with the chain of trust access keys generated from encryption keys based on digital signatures; and sending the authorization information and carrier profile information form the iSIM to the WWAN module for authentication, wirelessly, with a switched multimegabit data service (SM-DS) server associated with the carrier profile.

Abstract: A computerized method to store aggregate information handling system interaction telemetry data representing levels of operational activity reported for a user of an information handling system in a monitoring system data repository memory device and for receiving aggregate information handling system interaction telemetry data for a plurality of other users crowd-sourced from a population of information handling systems accessed by a plurality of other users. An interaction signature platform may apply a supervised learning model algorithm to the aggregate information handling system interaction telemetry data for the user in comparison to the aggregate information handling system interaction telemetry data for the plurality of other users to determine at least one indirect identifier of the interaction telemetry data.