Abstract: A computer system has a first node including a first baseboard management controller (BMC) and a first host of the first BMC. The first node determines that the first node is an active node. The first node operates a first storage service at the first host. The first host is a first storage device connected to one or more storage drives. The first storage service manages a first Remote Direct Memory Access (RDMA) controller for accessing user data stored on the one or more storage drives. The first node indicates to a second node that the first node is operating normally. The first node syncs data available on the first node with the second node.

Abstract: A computer system includes a BMC and a host of the BMC. The BMC redirect, through a BMC communication channel, a local media including a disk management tool to a host of the BMC as a particular drive. The host is a storage device connected to one or more storage drives. The disk management tool is configured to prepare a storage area of the one or more storage drives for installation of storage service on the host. The storage service managing a RDMA controller at the host. The BMC configures the host to boot from the particular drive. The BMC sends a first instruction to the host instructing the BMC to reboot. The BMC receives from the host a command for reading the disk management tool. The BMC sends the disk management tool to the host.

Abstract: A computer system includes a BMC and a host of the BMC. The BMC receives a first message from a first remote device on an existing out-of-band management network. The BMC determines whether the first message is directed to a storage service or fabric service running on the host, the host being a storage device. The storage service provides access to user data stored on one or more storage devices connected to the host via a storage network that is isolated from the management network. When the first message is directed to the storage service or fabric service: the BMC extracts a service command from the first message; the BMC sends, through a BMC communication channel to the host, a second message containing the service command to the host. The BMC communication channel has been established for communicating baseboard management commands between the BMC and the host.

Abstract: A computer system includes a BMC and a host of the BMC. The BMC receives a first message from a first remote device on a management network. The BMC determines whether the first message is directed to a storage service or fabric service executed on a main processor of a storage controller of the host. The host is a storage device. The storage controller includes an RDMA controller in communication with the main processor through an internal communication channel of the storage controller. The RDMA controller is managed by the storage service. The BMC extracts a service management command from the first message, when the first message is directed to the storage service or fabric service. The BMC sends, through a BMC communication channel established for communicating baseboard management commands between the BMC and the host, a second message containing the service management command to the host.

Abstract: A computer system includes a BMC and a host of the BMC. The BMC receives a first message from a first remote device on a management network. The BMC determines whether the first message is directed to a storage service or fabric service executed on a central processing unit of the host. The host is a storage device. The central processing unit is in commutation with a RDMA controller through an external communication channel. The RDMA controller being managed by the storage service. The BMC extracts a service management command from the first message, when the first message is directed to the storage service or fabric service. The BMC sends, through a BMC communication channel to the host, a second message containing the service management command to the host. The BMC communication channel has been established for communicating baseboard management commands between the BMC and the host.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and a device are provided. The device determines one or more feature components of firmware of a BMC to be tested. The device also determines a respective QA category from a plurality of QA categories for each of the one or more feature components. Each of the plurality of QA categories is associated with a set of feature components and a set of the test cases. The device further determines respective at least one test case for each of the one or more feature components based on the respective QA category of the each feature component. The test case specifies hardware and a procedure to be used to test the each feature component.

Abstract: Aspects of the disclosure relate to management node failover systems and methods. The system includes two management devices and a detection and reversal device. Each of the two management devices has a processor and a non-volatile memory storing computer executable code. The two management devices function respectively as an active node and a passive node. The detection and reversal device monitors status of the active node. When the active node fails, the detection and reversal device sends an activation signal to the passive node. The passive node, in response to receiving the active signal, switches from the passive node to the active node.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and a device are provided. The device determines that a target event occurred at a first server in a group of servers that are jointly managed. The device obtains, for the first server, a public-private key pair including a first key and a second key. The device provides the first key to the first server such that the first server is accessible by authentication with the first key. The device provides the second key to a client device such that the first server is accessible by the client device by providing the second key to the server. Subsequently, the device revokes the first key from the first server.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus is an embedded-system device. The embedded-system device loads a first boot loader from a read only section of a storage device in an initialization process of the embedded-system device. The embedded-system device also loads, by the first boot loader, a public key from the read only section. The embedded-system device further generates a first verification code for static code and data stored in a first section of the storage device. The embedded-system device then decrypts, by the first boot loader, an encrypted signature stored in the first section by using the public key to obtain a second verification code. The embedded-system device determines integrity of the static code and data based on the first verification code and the second verification code.

Abstract: Certain aspects direct to systems and methods for providing an intuitive user interface (UI) for device or vendor independent network switch management via a management controller. The management controller is communicatively connected to a network switch through a Simple Network Management Protocol (SNMP) interface. The management controller provides a web UI. When a remote computing device request the web UI, the management controller sends the web UI to the remote computing device. Thus, a user at the remote computing device may upload the parsed information of the MIB file to the management controller through the UI. The management controller then processes the parsed information of the MIB file, and displays the processed parsed information in a hierarchical organization through the UI. Then the management controller establishes a communication between the management controller and the network switch through the SNMP interface based on the parsed information of the MIB file.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and a device are provided. The device the package determination component 430 determines one or more packages distributed in firmware of a BMC. The device determines a respective update of each of the one or more packages. The device determines a first set of security vulnerabilities of the each package that is addressed by the respective update. The device further determines a second set of security vulnerabilities of the each package after the respective update is applied. The device generates a first file indicating the first set of security vulnerabilities and the second set of security vulnerabilities.

Abstract: Systems and methods for providing and supporting multiple Intelligent Platform Management Interface (IPMI) serial over local area network (SOL) sessions in a management controller. The system includes a management controller used to manage multiple nodes, and at least one remote computing device connected to the management controller via a local area network (LAN). In operation, the management controller configures multiple serial ports for the nodes, so the management controller is communicatively connectable to each of the nodes respectively via one of the serial ports. When the management controller receives a SOL request from the remote computing device to establish a SOL session to access a specific node, the management controller may accordingly establish the SOL session between the specific node and the remote computing device sending the SOL request. Thus, the management controller may support multiple SOL sessions, and may store information of each of the SOL sessions independently.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a management device. The management device obtains an organizational file of an executable program. The management device determines a list of libraries that are depended to execute the executable program. The management device obtains the list of libraries from one or more library collections. The library collections include at least one library that is not in the list of libraries. The management device constructs an embedded-system device with the executable program and the list of libraries without the at least one library.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be an embedded-system device. The apparatus may be an embedded-system device. The embedded-system device emulates a first serial port. The embedded-system device exposes the first serial port to a host of the embedded-system device through a USB connection. The embedded-system device receives first USB packets containing first command or data from the host through the USB connection. The embedded-system device inputs the first command or data to the first serial port.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a service processor. The service processor generates a first encryption key at runtime based on unique device data of the service processor and a first logic. The service processor refrains from storing the first encryption key in the storage device. The service processor further encrypts target data based on the encryption key and an encryption algorithm to obtain first encrypted data. The service processor then stores the first encrypted data in a storage device of the service processor.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be an embedded-system device. The embedded-system device emulates a USB device. The embedded-system device exposes the emulated USB device to a host of the embedded-system device through a USB connection. The embedded-system device receives data from BIOS of the host through the emulated USB device.

Abstract: A system includes a computing device and a server management controller configured to be connected to the computing device. The server management controller includes a processor, an interface in communication with multiple sensors disposed in the computing device, and a non-volatile memory storing computer executable code. The code, when executed at the processor, is configured to: assign each of the sensors with a logical unit number (LUN) and a sensor number; receive a first message from a first sensor of the sensors via the interface, where the first message has a first LUN field storing the assigned LUN and a first sensor number field storing the assigned sensor number of the first sensor; process the received first message; and determine the first sensor as a source of the first message based on the LUN and the sensor number stored in the first message.

Abstract: Certain aspects direct to systems and methods for network switch management via a management controller using a management information base (MIB) to JavaScript Object Notation (JSON) parser. At a computing device, an administrator provides a MIB file corresponding to a network switch to be managed. Then the administrator utilizes a parser application to parse the MIB file at the computing device to retrieve Object Identifiers (OIDs) from the MIB file, and then converts the OIDs to JSON objects, in order to generate parsed information of the MIB file including the JSON objects. Thus, the administrator may use a browser to access a web user interface at a management controller to upload the parsed information of the MIB file to the management controller. The management controller may then manage and configure the network switch through a Simple Network Management Protocol (SNMP) interface based on the parsed information of the MIB file.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a service processor. The service processor generates a first encryption key at runtime based on unique device data of the service processor and a first logic. The service processor refrains from storing the first encryption key in the storage device. The service processor further encrypts target data based on the encryption key and an encryption algorithm to obtain first encrypted data. The service processor then stores the first encrypted data in a storage device of the service processor.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a service processor. The service processor sends to a DHCP server a request-to-acquire for acquiring an IP address. The service processor then receives a response from the DHCP server. The response includes a first user name. The service processor further configures a user account in association with the first user name on the service processor. The user account allows access to the service processor.