Abstract: Implementations are provided herein for offering partitioned performance within a distributed file system and providing throttling at the granular level. A set of hardware and network resources available to process work items can be determined. A set of resource accounting tokens based on resource records generated when processing work items can be dynamically updated. A granular resource accounting aggregate for a customizable field of data can be selected for throttling, such as a unique user identifier, a unique group identifier, a unique client internet protocol address, a unique file, etc. A granular throttling level can then be established based on a granular throttling policy. In response to the resource accounting aggregate meeting the throttling level, the user, group, internet protocol address, etc. can be throttled at, at least one of, the cluster layer, the node layer or the protocol layer.

Abstract: Implementations are provided herein for offering partitioned performance within a distributed file system and more specifically, for offering adaptive predicted impact of resource consumption by pending work items. Core resource consumption per work item can be estimated prior to processing the work item. When processing the work item, the actual amount of resources used to process the work item can be measured and recorded. The file system can then update future estimates for performing work items based on past results. Resources made available to process future requests can be throttled based on dynamically updated estimates of resource consumption by pending work items.

Abstract: Implementations are provided herein for offering partitioned performance within a distributed file system. Core resource consumption per work item can be tracked independently. Discriminative data already known by the file system surrounding the context of the work item can be used to determine a reference resource accounting specification applicable to the work item. When processing the work item, a detailed resource record can be generated that inventories the resources used in processing the work item. The resource record associated with the work item can be recorded into a set of resource accounting tokens that track activity resource consumption at a granular level. A universal table of resource accounting tokens can be dynamically updated upon the processing of work items and generation of associated resource records throughout the distributed file system.

Abstract: Implementations are provided herein for offering partitioned performance within a distributed file system; specifically, for providing adaptive policies and leases within the partitions. An amount of resources available to a cluster of nodes operating as a distributed file system can be determined and those resources can be apportioned to individual nodes based on hardware profiles of the nodes. A set of resource accounting tokens can be dynamically updated and used as a basis to generate a cluster resource accounting aggregate, a set of node resource accounting aggregates, and a set of protocol resource accounting aggregates. The dynamically updated resource accounting aggregates can then be used to dynamically throttle resource available to process work requests at the cluster, node, and protocol head layers based on policy.

Abstract: Firmware of a system is configured to allow secondary devices, such as a smart card, to be used for authentication. In an example embodiment, the secondary device is a CCID smart card in compliance with the ISO 7816 specification. The smart card is inserted into a card reader coupled to the system prior to booting the system. The firmware comprises an emulator and driver configured to allow authentication information from the smart card to be utilized to allow execution of the boot process. In an example embodiment, the smart card comprises external keys for use with BITLOCKER™. The secondary device is compatible with systems implementing a BIOS and with systems implementing EFI. Authentication also can be accomplished via devices that do not provide data storage, such as a biometric device or the like.

Abstract: A secure channel is established between a processor and a smart card such that authentication can be achieved without transmitting a Personal Identification Number (PIN) to or from the smart card in the clear. A session ticket indicative of the PIN is generated, and the session ticket is securely negotiated between the computer and the smart card instead of the PIN. Also, a trusted path is established between a user and the operating system of the processor for allowing the user to enter a PIN. A trusted computing base is established in the processor for receiving the PIN from the user and performing operations associated therewith.

Abstract: A hybrid resource manager is provided for use in a computing environment. The hybrid resource manager serves as the single resource manager that cooperates with an operating system to manage each of the individual device drivers associated with the various functions of a multifunction hardware device. In one example the hybrid resource manager implements a consistent management and policy framework to prevent conflicts from arising when multiple functions are simultaneously requested by various applications.

Abstract: A hybrid resource manager is provided for use in a computing environment. The hybrid resource manager serves as the single resource manager that cooperates with an operating system to manage each of the individual device drivers associated with the various functions of a multifunction hardware device. In one example the hybrid resource manager implements a consistent management and policy framework to prevent conflicts from arising when multiple functions are simultaneously requested by various applications.

Abstract: A secure channel is established between a processor and a smart card such that authentication can be achieved without transmitting a Personal Identification Number (PIN) to or from the smart card in the clear. A session ticket indicative of the PIN is generated, and the session ticket is securely negotiated between the computer and the smart card instead of the PIN. Also, a trusted path is established between a user and the operating system of the processor for allowing the user to enter a PIN. A trusted computing base is established in the processor for receiving the PIN from the user and performing operations associated therewith.

Abstract: Firmware of a system is configured to allow secondary devices, such as a smart card, to be used for authentication. In an example embodiment, the secondary device is a CCID smart card in compliance with the ISO 7816 specification. The smart card is inserted into a card reader coupled to the system prior to booting the system. The firmware comprises an emulator and driver configured to allow authentication information from the smart card to be utilized to allow execution of the boot process. In an example embodiment, the smart card comprises external keys for use with BITLOCKER™. The secondary device is compatible with systems implementing a BIOS and with systems implementing EFI. Authentication also can be accomplished via devices that do not provide data storage, such as a biometric device or the like.