Abstract: A computer program product provides program instructions that are executable by a processor to cause the processor to perform various operations. The operations may include monitoring a performance metric for a workload instance being executed by a composed system within a pool of composable resources in a composable computing system. The composed system includes a compute resource and an associated hardware resource selected from a data storage resource, a memory resource and/or a graphic processing resource. A service level agreement is identified for the workload instance, wherein the agreement includes a minimum level of the performance metric that the composed system must provide to support the workload instance. A power cap may be imposed on the compute resource, and a power cap may be imposed on the associated hardware resource by sending a power capping command to a baseboard management controller on a server including the associated hardware resource.

Abstract: Topology discovery between compute nodes and interconnect switches including creating, on an interconnect switch, a virtual topology discovery device for a first port, wherein the interconnect switch is coupled to a compute node via the first port, and wherein the virtual topology discovery device comprises a port identifier for the first port; mapping the virtual topology discovery device to the first port; receiving an inventory request from the compute node via the first port; routing the inventory request to the virtual topology discovery device for the first port; and sending, from the virtual topology discovery device for the first port, the port identifier to the compute node.

Abstract: An apparatus for a license orchestrator to most efficiently distribute fee-based licenses includes a processor and a memory that stores code executable by the processor to determine that a workload is scheduled to be executed by a computing device. The computing device includes a licensable resource available for execution of the workload. The code is executable to compare a per-use licensing cost associated with using the licensable resource for execution of the workload with a cost of using existing capabilities of the computing device for execution of the workload and license and use the licensable resource for execution of the workload in response to determining that the per-use licensing cost of the licensable resource is less than using the existing capabilities of the computing device.

Abstract: Tamper detection systems and methods for electronic devices carried by mobile equipment are disclosed. According to an aspect, a system includes an electronic device and a first sensor attached to the electronic device for detecting motion of the electronic device. The system includes a second sensor configured to detect motion of the mobile equipment to which the electronic device is attached. A tamper detection module receives data from the first sensor that indicates the detected motion of the electronic device. The tamper detection module receives data from the second sensor that indicates the detected motion of the mobile equipment. Further, the tamper detection module determines a difference between the detected motion of the electronic device and the detected motion of the mobile equipment. The tamper detection module determines a tamper condition for the electronic device based on the determined difference. A security action in response to determining the tamper condition.

Abstract: A method includes various operations and a computer program product may cause a processor to perform various operations. The operations include obtaining, for each of a plurality of baseboard management controllers (BMCs) that have been configured to form a baseboard management controller (BMC) group, an amount of load placed on the BMC, wherein a first BMC in the BMC group has been configured to operate as a BMC group leader for the BMC group. The operations further include, in response to a second BMC in the BMC group having less load than any other BMC in the BMC group, configuring the second BMC to operate as the BMC group leader and unconfiguring the first BMC to no longer operate as the BMC group leader. Still further, the operations include causing the second BMC to perform a BMC group operation operating as the BMC group leader.

Abstract: A method includes determining that a compute node is scheduled to execute a workload. The compute node includes a remote resource available for use in execution of the workload. The remote resource functions as being installed on the compute node and is remote to the compute node and two or more remote hardware resources are available for selection as the remote resource. The method includes calculating, for each of the remote hardware resources, projected power consumption data related to execution of the workload. The projected power consumption data includes power consumption data based on an environment where each of the remote hardware resources is located. The method includes selecting a remote hardware resource for use during execution of the workload based on the projected power consumption data of the remote hardware resources and submitting the workload to the compute node for execution while using the selected remote hardware resource.

Abstract: An apparatus for a license orchestrator to most efficiently distribute fee-based licenses includes a processor and a memory that stores code executable by the processor to determine that a workload is scheduled to be executed by a computing device. The computing device includes a licensable resource available for execution of the workload. The code is executable to compare a per-use licensing cost associated with using the licensable resource for execution of the workload with a cost of using existing capabilities of the computing device for execution of the workload and license and use the licensable resource for execution of the workload in response to determining that the per-use licensing cost of the licensable resource is less than using the existing capabilities of the computing device.

Abstract: An apparatus for dynamic driver selection based on firmware for a hardware component includes a processor and a memory that stores program code executable by the processor to perform operations including identifying hardware components installed on a device prior to installing an operating system. The operations include determining a level for firmware installed on one or more hardware components of the identified hardware components. The operations include determining a level for a device driver available to the operating system for communicating with the hardware component. The operations include in response to determining that the available device driver level is not compliant with the firmware level for the hardware component, dynamically retrieving, from a repository of device drivers, a device driver that has a level that is compliant with the firmware level. The operations include installing the compliant device driver on the device during installation of the operating system.

Abstract: Managing composable compute system infrastructure with support for decoupled firmware updates includes mapping a device to a server, wherein the device is in a resource pool of devices including at least one idle device, and wherein the device and the server are within a pod of composable compute elements connected by a fabric in a composable system executing a workload; detecting that the device has a needed firmware update; exchanging, transparent to the workload executing in the composable system, the mapping for the device with the needed firmware update and the idle device in the resource pool; and performing the firmware update on the unmapped device as the workload executes in the composable system with the newly mapped device.

Abstract: An apparatus for multifactor identification of a mobile device for access to data processing devices within a secured data center includes a processor of a secured server and a memory that stores code executable by the processor. The code is executable by the processor to receive from a mobile device a request for authorization to access a data processing device within a secured data center, verify that user credentials received from the mobile device in conjunction with the authorization request match credentials of an authorized user, where the authorized user is authorized to access the data processing device, verify that the mobile device is in proximity to the data processing device, and authorize the mobile device to access the data processing device in response to verifying the user credentials match credentials of an authorized user and verifying that the mobile device is in proximity to the data processing device.

Abstract: Methods, apparatus, and computer program products for configurable secure boots are disclosed. One method includes determining, by a processor of a computing apparatus, whether a geographical location of the computing apparatus corresponds to a predetermined location, performing a boot process for booting up the computing apparatus in response to the geographical location of the computing apparatus corresponding to the predetermined location, and disabling the boot process from booting up the computing apparatus in response to the geographical location of the computing apparatus failing to correspond to the predetermined location. Computing apparatus and computer program products for performing the method are also disclosed.

Abstract: A method for recovering data on a failed storage device includes detecting that a first storage device has a failure, creating a simulated management module where the simulated management module linked with a second storage device, writing a replica of at least some of the data as stored in the first storage device to a second storage device, creating a permanent management module and deleting the simulated management module.

Abstract: Managing composable compute system infrastructure with support for decoupled firmware updates includes mapping a device to a server, wherein the device is in a resource pool of devices including at least one idle device, and wherein the device and the server are within a pod of composable compute elements connected by a fabric in a composable system executing a workload; detecting that the device has a needed firmware update; exchanging, transparent to the workload executing in the composable system, the mapping for the device with the needed firmware update and the idle device in the resource pool; and performing the firmware update on the unmapped device as the workload executes in the composable system with the newly mapped device.

Abstract: Shared virtual media in a composed system, including generating, in a switch of a fabric of the composed system, a virtual media device; associating media data with the virtual media device; and sending, by the switch, via the fabric, to one or more compute nodes of the composed system, the media data.

Abstract: Network hardware of a computing device receives a network packet over a network to which the network hardware is connected. The network hardware determines that the network packet includes a power-cycling command. The network hardware, in response to determining that the network packet includes the power-cycling command, triggers a physical line between the network hardware and a power supply of the computing device. The power supply is connected to a power source and currently provides power from the power source to the computing device. In response to the network hardware triggering the physical line, the power supply interrupts providing the power to the computing device for a length of time to cause the computing device to restart and cold reboot.

Abstract: Transparent memory management for over-subscribed accelerators is disclosed. A request from a remote initiator to execute a workload on a shared accelerator is received at a host system comprising the shared accelerator. A determination is made that there is insufficient physical memory of the accelerator to accommodate the request from the remote initiator. Responsive to determining that there is insufficient physical memory of the accelerator. An allocation of host system memory is requested for the remote initiator from the host system. A mapping between the remote initiator and the allocation of host system memory is then created.

Abstract: Managing server nodes on a management network with modified service discovery protocol messages including determining that a first management server requires management data for installation on a server node, wherein the first management server and the server node are communicatively coupled to a management network; determining that the required management data for installation on the server node is not stored on the first management server; broadcasting, on the management network, a first modified service discovery protocol (SDP) message requesting the required management data for installation on the server node; receiving, from a second management server communicatively coupled to the management network, a second modified SDP message providing the required management data for installation on the server node; and installing the required management data on the server node.

Abstract: An apparatus for multifactor identification of a mobile device for access to data processing devices within a secured data center includes a processor of a secured server and a memory that stores code executable by the processor. The code is executable by the processor to receive from a mobile device a request for authorization to access a data processing device within a secured data center, verify that user credentials received from the mobile device in conjunction with the authorization request match credentials of an authorized user, where the authorized user is authorized to access the data processing device, verify that the mobile device is in proximity to the data processing device, and authorize the mobile device to access the data processing device in response to verifying the user credentials match credentials of an authorized user and verifying that the mobile device is in proximity to the data processing device.