Abstract: An apparatus comprises at least one processing device configured to establish a first secure communication channel between at least one edge computing site and a management system, and to send a certificate signing request over the first secure communication channel from the at least one edge computing site to the management system. The processing device is further configured to receive, over the first secure communication channel from the management system in response to the certificate signing request, a digitally signed certificate for the at least one edge computing site and a certificate authority certificate. The processing device is still further configured to establish a second secure communication channel between the at least one edge computing site and the management system. The second secure communication channel utilizes a mutual authentication protocol. The certificate authority certificate and the digitally signed certificate are used to establish the second secure communication channel.

Abstract: Methods, apparatus, and processor-readable storage media for automatically determining authenticated online statuses of edge devices are provided herein. An example computer-implemented method includes authenticating at least one connection of at least one edge device to at least one event bus by processing at least one event communication signed by the at least one edge device; storing the at least one signed event communication in at least one database; requesting online status of the at least one edge device by querying one or more APIs associated with the at least one event bus in accordance with one or more temporal parameters; comparing one or more responses from the one or more APIs associated with the at least one event bus with at least a portion of the at least one signed event communication stored in the at least one database; and performing automated actions based on the comparing.

Abstract: A method for managing workload balancing over a reverse connection includes: receiving a request from a user that wants to access a cluster to initiate performing a workload, sending a call to a proxy service; upon receiving the call: sending a message to an agent executing on a first targeted IHS in the cluster; initiating a TCP server hosted by the proxy service; making a determination that a first targeted IHS is not down; receiving, based on the determination, a response from the agent indicating that a tunnel has been established; after receiving the response from the agent, sending, a second response to the client to indicate that the tunnel is ready to use; initiating a TCP connection to the TCP server; receiving, via the TCP connection, data associated with the workload from the client; and transferring the data to the agent over the reverse connection.

Abstract: A method for managing workload balancing over a reverse connection includes: receiving a request from a user that wants to access a cluster to initiate performing a workload, sending a call to a proxy service; upon receiving the call: sending a message to an agent executing on a first targeted IHS in the cluster; initiating a TCP server hosted by the proxy service; making a determination that a first targeted IHS is not down; receiving, based on the determination, a response from the agent indicating that a tunnel has been established; after receiving the response from the agent, sending, a second response to the client to indicate that the tunnel is ready to use; initiating a TCP connection to the TCP server; receiving, via the TCP connection, data associated with the workload from the client; and transferring the data to the agent over the reverse connection.

Abstract: Methods and systems for securing edge devices are disclosed. The edge devices may be secured by facilitating time synchronization of the edge devices through an edge orchestrator. The edge orchestrator may securely perform time synchronization with a trusted time server. The edge orchestrator may obtain a true time value from the trusted time server and verify the integrity of the true time value using security processes. Once the integrity of the true time value has been verified, then the edge devices may obtain the true time value from the edge orchestrator through secure communication channels. After the edge devices obtain the true time value from the edge orchestrator, the edge device may perform time synchronization.

Abstract: Methods and systems for securing edge devices are disclosed. The edge devices may be secured by facilitating time synchronization of the edge devices through an edge orchestrator. The edge orchestrator may securely perform time synchronization with a trusted time server. The edge orchestrator may obtain a true time value from the trusted time server and verify the integrity of the true time value using security processes. Once the integrity of the true time value has been verified, then the edge devices may obtain the true time value from the edge orchestrator through secure communication channels. After the edge devices obtain the true time value from the edge orchestrator, the edge device may perform time synchronization.

Abstract: An apparatus comprises at least one processing device configured to establish a first secure communication channel between at least one edge computing site and a management system, and to send a certificate signing request over the first secure communication channel from the at least one edge computing site to the management system. The processing device is further configured to receive, over the first secure communication channel from the management system in response to the certificate signing request, a digitally signed certificate for the at least one edge computing site and a certificate authority certificate. The processing device is still further configured to establish a second secure communication channel between the at least one edge computing site and the management system. The second secure communication channel utilizes a mutual authentication protocol. The certificate authority certificate and the digitally signed certificate are used to establish the second secure communication channel.

Abstract: Methods, apparatus, and processor-readable storage media for automatically determining authenticated online statuses of edge devices are provided herein. An example computer-implemented method includes authenticating at least one connection of at least one edge device to at least one event bus by processing at least one event communication signed by the at least one edge device; storing the at least one signed event communication in at least one database; requesting online status of the at least one edge device by querying one or more APIs associated with the at least one event bus in accordance with one or more temporal parameters; comparing one or more responses from the one or more APIs associated with the at least one event bus with at least a portion of the at least one signed event communication stored in the at least one database; and performing automated actions based on the comparing.

Abstract: An electricity generator including a suspended membrane resting on a frame, the membrane bearing alternating thermoelectric tracks connected in series and each having one end on the frame and one end on a central part of the membrane, wherein the membrane is deformable, the central parts of the membrane being intended to be in mechanical and thermal contact with a heat source.