Abstract: An apparatus for securely configuring a tenant VLAN includes a processor and a memory that stores code executable by the processor. The code is executable by the processor to detect connection of a new device to a computing system. The new device is designated for use by a new tenant and the new device in a default state prior to configuration for use by the new tenant. The computing system is a multi-tenant system. The code is executable by the processor to command the new device to enter a provisioning state in response to detecting connection of the new device. The new device in the provisioning state is unable to access operational equipment of the computing system and data stored by tenants of the computing system.

Abstract: Systems and methods for usage of secondary power supplies in computing environments based on risk and cost assessments are disclosed. According to an aspect, a method includes determining a risk value to a primary power source of a need to utilize a secondary power source for powering a plurality of computing devices. The method includes using the secondary power source to power a portion of the computing devices based on the determined risk value.

Abstract: Managing composable compute systems with support for hyperconverged software defined storage includes: monitoring a composable pod of computing elements, wherein the composable pod of computing elements comprises a first composed server and a first data drive, wherein the first composed server comprises at least one of the computing elements of the composable pod, and wherein the first data drive is configured for attachment to a composable system executing hyperconverged storage software; detecting that a workload on the first composed server of the composable pod targets data on the first data drive of the composable pod; determining that the first data drive of the composable pod is not mapped to the first composed server; and mapping the first data drive containing the data targeted by the workload to the first composed server hosting the workload.

Abstract: A method includes providing, by a network switch, a production VLAN that supports communication between a plurality of servers connected to the switch; and detecting a new physical connection of a cable between a first server and a first switch port of the switch. The method further includes automatically allocating, by the switch, a first provisioning VLAN to the first server, wherein communications coming from the first server are directed to the first provisioning VLAN, wherein the first provisioning VLAN includes a provisioning server, and wherein the first provisioning VLAN is isolated against communication with the production VLAN. An apparatus that performs the method is also provided.

Abstract: A method includes tracking, for each of a plurality of workloads, a wear rate incurred by a component of a given component type as a result of processing an instance of the workload on a compute node that includes the component. The method further comprises determining a remaining lifespan for a plurality of components in a plurality of compute nodes, and identifying a component from among the plurality of components having a remaining lifespan of less than a first threshold amount. Sill further, the method comprises identifying an instance of one of the workloads that needs processing and has a wear rate greater than a second threshold amount, and processing the identified workload instance on the identified component.

Abstract: Managing thermal cycles of air temperature within a server rack includes: monitoring air temperature within the server rack; determining that the monitored temperature has fallen below a predetermined minimum threshold; and increasing air temperature within the server rack including capturing warm ambient air.

Abstract: An apparatus, such as a computing node, includes a storage device for storing program instructions and a service processor for processing the program instructions to: send an out-of-band request for access to an operator panel, wherein the out-of-band request is sent over a local network domain operatively coupling a plurality of computing nodes; receive a first out-of-band reply identifying an address and one or more capabilities of an operator panel accessible over the local network domain; and negotiate an active link to the operator panel over the local network domain. Another apparatus is similar but further includes an operator panel operatively coupled to a service processor, the service processor for processing the program instructions to: receive the out-of-band request over the local network domain; send the first out-of-band message; and negotiate an active link between the operator panel and a computing node.

Abstract: An apparatus includes one or more processor core, trusted key store, memory controller, and a memory module. The memory controller includes an encryption/decryption module that encrypts data being stored to the memory module for a guest OS being executed by the processor core(s) and that decrypts data being read from the memory module for the guest OS. Data owned by the guest OS is encrypted and decrypted by the encryption/decryption module using an encryption key stored by the trusted key store in association with the guest OS. A method encrypts data owned by the guest OS using the encryption key assigned to the guest OS and stores the encrypted data on a memory module, wherein the encrypted data is stored in association with the process identifier of the guest OS, and decrypts the encrypted data using the guest OS encryption key and provides the decrypted data to the guest OS.

Abstract: A method includes providing, by a network switch, a production VLAN that supports communication between a plurality of servers connected to the switch; and detecting a new physical connection of a cable between a first server and a first switch port of the switch. The method further includes automatically allocating, by the switch, a first provisioning VLAN to the first server, wherein communications coming from the first server are directed to the first provisioning VLAN, wherein the first provisioning VLAN includes a provisioning server, and wherein the first provisioning VLAN is isolated against communication with the production VLAN. An apparatus that performs the method is also provided.

Abstract: A method includes migrating a workload from a first server to a second server, wherein the first and second servers are within a management network. The method further includes transferring one or more configuration parameter(s) from the first server to the second server, wherein the one or more parameter(s) enables continued performance of the workload on the second server.

Abstract: For system management applied to a computer system, a power supply of the computer system starts to power a motherboard and a CPU thereon. A reset holding module in a system management controller holds the CPU in a Power-on Reset (PoR) state. The system management controller executes an operation requested by a user. The reset holding module releases the CPU from the PoR state in response to the system management controller completing the operation.

Abstract: For system management applied to a computer system, a power supply of the computer system starts to power a motherboard and a CPU thereon. A reset holding module in a system management controller holds the CPU in a Power-on Reset (PoR) state. The system management controller executes an operation requested by a user. The reset holding module releases the CPU from the PoR state in response to the system management controller completing the operation.

Abstract: A CPU package includes an encryption and decryption module disposed in a communication path between an instruction path of a processor core and a data register that is externally accessible through a debug port, and a key store accessible to the module. The module is configured to encrypt and store data in the data register for each of a plurality of processes being handled in the instruction path, wherein data owned by each process is encrypted and decrypted by the module using an encryption key assigned to the process. The key store is configured to store the encryption key assigned to each of a plurality of processes, wherein the key store is inaccessible outside the CPU package. The data is only decrypted for a requesting process having a process identifier that matches the process identifier stored in the processor data structure along with the requested data.

Abstract: For system management applied to a computer system, a power supply of the computer system starts to power a motherboard and a CPU thereon. A reset holding module in a system management controller holds the CPU in a Power-on Reset (PoR) state. The system management controller executes an operation requested by a user. The reset holding module releases the CPU from the PoR state in response to the system management controller completing the operation.

Abstract: A method includes tracking, for each of a plurality of workloads, a wear rate incurred by a component of a given component type as a result of processing an instance of the workload on a compute node that includes the component. The method further comprises determining a remaining lifespan for a plurality of components in a plurality of compute nodes, and identifying a component from among the plurality of components having a remaining lifespan of less than a first threshold amount. Sill further, the method comprises identifying an instance of one of the workloads that needs processing and has a wear rate greater than a second threshold amount, and processing the identified workload instance on the identified component.

Abstract: Systems and methods for usage of secondary power supplies in computing environments based on risk and cost assessments are disclosed. According to an aspect, a method includes determining a risk value to a primary power source of a need to utilize a secondary power source for powering a plurality of computing devices. The method includes using the secondary power source to power a portion of the computing devices based on the determined risk value.

Abstract: Workload distribution based on serviceability includes: generating, for each of a plurality of computing systems, a metric representing serviceability of the computing system for which the metric is generated; and distributing workload among said plurality of computing systems in dependence upon the metrics.

Abstract: Systems and methods for reducing interference in wireless communication among computing devices are disclosed herein. In accordance with an aspect, a first wireless communication device is provided that is operably connected to a first server and configured to wirelessly communicate information associated with the first server. The method includes determining, at the first wireless communication device, presence of a second wireless communication device operably connected to a second server. The method also includes negotiating with the second wireless communication device to establish a plan for sharing wireless communication airspace between the first wireless communication device and the second wireless communication device. Further, the method includes controlling communication based on the plan for sharing wireless communication airspace.

Abstract: Embodiments of the invention provide a method, system and computer program product for dynamic activation of service indicators based upon service personnel proximity. In an embodiment of the invention, a method for dynamic activation of service indicators based upon service personnel proximity is provided. The method includes receiving at an enclosure of different hardware devices in a data center, a message for personnel proximity based activation of a service indicator lamp and activating a presence sensor in response to receiving the message. The method also includes responding to presence sensing an individual by the presence sensor by activating the service indicator lamp of the enclosure.

Abstract: Embodiments of the invention provide for user permissions based control of pooled FoD activation keys. In an embodiment of the invention, a method for user permissions based control of pooled FoD activation keys is provided. The method includes pooling one or more authorization codes for access by different end users in activating different features of a set of hardware components using FoD. The method also includes responding to an FoD request to activate one of the features by a particular one of the end users by determining whether or not a pre-defined code usage policy permits the particular one of the end users to use a pooled one of the authorization codes and if permitted according to the pre-defined code usage policy, generating an FoD activation key with the pooled one of the authorization codes and activating the one of the features with the FoD activation key.