Abstract: Systems and methods are provided for migration of workspaces configured in an IHS (Information Handling System). According to one embodiment, an IHS includes a workspace orchestration service that is executed to manage deployment of workspaces on the IHS; and computer-executable instructions to receive a request to migrate a first workspace from the IHS to a computing platform external to the IHS. Upon receipt of the request, the instructions instantiate a second workspace on the computing platform while the first workspace continues to operate on the IHS, and when the second workspace has been instantiated, copy one or more state-based parameters from the first workspace to the second workspace. When the state-based parameters have been configured on the second workspace, commence operation on the second workspace.

Abstract: Systems and methods are provided for consolidation of IHS (Information Handling System) VPN (Virtual Private Network) resources utilized by workspaces operating on the IHS, where the workspaces operate in isolation from the operating system of the IHS. A remote workspace orchestration service manages deployment of workspaces on the IHS. The workspaces are instantiated and operate according to a workspace definition provided by the workspace orchestration service. An embedded controller of the IHS registers a VPN consolidation function of the IHS with the workspace orchestration service, which notifies the workspaces of the VPN consolidation function. A VPN workspace is instantiated that operates according to a workspace definition provided by the workspace orchestration service. The respective workspace definitions of the workspaces are updated to route VPN communications to the VPN workspace.

Abstract: Systems and methods for deploying software updates in hybrid workspace environments are described. In some embodiments, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to: consolidate an Operating System (OS) and Basic Input/Output System (BIOS) inventory with a plurality of workspace inventories; resolve dependencies among a plurality of updates based upon the consolidated inventories to identify an order of deployment; and deploy the plurality of updates in the order of deployment.

Abstract: Modern Standby is enabled for unsupported applications. An enabler driver can be included on a system that supports Modern Standby and can be configured to detect when applications are loaded on the system. When an unsupported application is loaded, the enabler driver can interface with an enabler service to determine whether the unsupported application is Modern Standby capable. If so, the enabler driver can add the unsupported application to a throttle job object that the operating system uses to determine which applications should remain active during Modern Standby. In instances where an application is deployed in a container, an enabler container service can be leveraged to determine whether the containerized application is Modern Standby capable. If so, the enabler driver can add the container to the throttle job object.

Abstract: Aspects of this disclosure improve data availability by decreasing access times to obtain data from the storage device while still providing high memory density. A method may include receiving, by a controller of a non-volatile solid-state storage device, data with tags to be stored in a first portion configured as a first type and a second portion configured as a second type; receiving, by the controller, a storage command comprising an indicator, wherein at least some data associated with a tag identified by the indicator is stored in the first portion; and writing, by the controller based on receiving the storage command, the at least some data associated with the tag identified by the indicator from the first portion to the second portion. Other aspects are also disclosed.

Abstract: Modern Standby configurations can be applied on a per-application basis. When a system is transitioning into Modern Standby, a host service can select a Modern Standby configuration to be applied to each Modern Standby capable application. The host service can then create job objects, or other suitable structures or functionality, to cause the selected Modern Standby configurations to be applied to the Modern Standby capable applications while the system is in Modern Standby. In this way, even though the operating system may implement Modern Connected Standby for all Modern Standby capable applications, dynamically selected Modern Standby configurations can be applied to mimic Modern Disconnected Standby or suspension for at least some of the Modern Standby capable applications.

Abstract: Shared hoteling workspaces and computer equipment are preconfigured based on location. A location associated with a mobile device is monitored. As the mobile device moves toward a workspace, computer equipment associated with the workspace are automatically preconfigured for use. Different configuration events and operational states may be implemented, based on a locational proximity of the mobile device to the workspace. When the mobile device arrives at the workspace, the mobile device has been automatically paired/registered with the computer equipment at the workspace. Moreover, when the location of the mobile device no longer matches the workspace, the network pairings/registrations may be automatically torn down and deleted, thus making the workspace available for a next occupant.

Abstract: An information handling system may determine a pre-boot security posture, and update an advanced configuration and power interface mitigation table with the pre-boot security posture. The system may also update a security mitigation table based on a security mitigation policy, and determine a security mitigation based on a protection flag in the advanced configuration and power interface mitigation table and the security mitigation table.

Abstract: Shared hoteling workspaces and computer equipment are preconfigured based on location. A location associated with a mobile device is monitored. As the mobile device moves toward a workspace, computer peripheral equipment assigned to the workspace are identified and a best known configuration is retrieved. As the mobile device continues moving toward the workspace, the mobile device installs the best known configuration. Location-based policies and configuration events are defined and executed to ensure the best known configuration is timely installed. When the mobile device arrives at the workspace, the mobile device has been automatically configured to the computer peripheral equipment at the workspace. The mobile device is thus preconfigured, perhaps just in time, for immediate productivity and optimum user experience. Moreover, when the location of the mobile device no longer matches the workspace, the best known configuration may be automatically deleted to conserve memory.

Abstract: Systems and methods for generating workspace distribution and/or configuration recommendations are described. In an embodiment, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to: receive data related to a plurality of workspaces; generate, based upon the data, a recommendation to modify at least one of the plurality of workspaces; and modify the at least one of the plurality of workspaces.

Abstract: When a transport is added, degraded, upgraded or lost between a computing device and a dock, peripherals can be moved or have their configurations modified to thereby seamlessly handoff and efficiently share the peripherals' traffic between the available transport(s). A service can be employed on the computing device to determine when a transport is added, degraded, updated or lost and to identify and implement one or more applicable rules to accomplish the handoff and sharing of the peripherals' traffic.

Abstract: According to one embodiment, an Information Handling System (IHS) includes executable instructions for receiving a request to execute an application that has been deployed in the workspace by a workspace that has been instantiated on the IHS. In response, the instructions communicate with the IHS to obtain a license entity associated with the application, and execute the application in the workspace according to the obtained license entity associated with the application.

Abstract: Embodiments of systems and methods for managing an Information Handling System (IHS) using a workspace orchestration system are described. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to, upon a request to instantiate a workspace on the IHS, receive a user identity of a user of the workspace. Using the user identity of the user, the instructions may further cause the IHS to obtain, from a database, one or more policies associated with the user, and instantiate the workspace using the obtained policies. The policies identify one or more applications to be implemented in the workspace, application settings to be applied to each of the applications, or workspace settings to be applied to the workspace.

Abstract: Systems and methods are provided for consolidation of IHS (Information Handling System) resources utilized by workspaces operating on the IHS, where the workspaces operate in isolation from the operating system of the IHS. A remote workspace orchestration service manages deployment of workspaces on the IHS. The workspaces are instantiated and operate according to a workspace definition provided by the workspace orchestration service. An embedded controller of the IHS registers a resource consolidation function of the IHS with the workspace orchestration service, which notifies the workspaces of the resource consolidation function. Based on the workspace definitions, redundant IHS resources utilized by the workspaces are identified. The resource consolidation function is notified of the redundant IHS resources.

Abstract: Workspace continuity can be provided. When a user connects a user computing device to peripherals to form a workspace, a configuration for the workspace can be selected and automatically applied to the workspace. The configuration can be selected based on identifiers of the user, a user computing device, and the workspace.

Abstract: A container mode can be dynamically selected when an application is launched on an end user computing device. When an application is deployed to the end user computing device, a container configurator can collect information about the application and share it with a machine learning solution to receive an application score for the application. When the application is launched on the end user computing device, the container configurator can provide the application score, capabilities of the end user computing device, current resource utilization and admin preferences to the machine learning solution. The machine learning solution can then dynamically select a container mode based on this information and provide the selection to the container configurator. The container configurator can then cause the application to be launched within a container that matches the selected container mode.

Abstract: A computing device's performance can be dynamically tuned for a containerized application. A dynamic tuning solution can be configured to identify target applications that are running in workspaces implemented using containers, including when a target application is moved between workspaces and when a workspace's context is changed. The dynamic tuning solution can create mappings between identifiers of the container and a performance level associated with the target applications. A driver can then use these mappings to ensure that the computing device is dynamically tuned to the performance level associated with the target application when the container hosting the target application is active. The dynamic tuning solution can also reconcile discrepancies between a performance level associated with a target application and a performance level associated with a workspace in which the target application is containerized.

Abstract: External display devices can be dynamically configured. An adaptive display engine may be configured to receive requests from agents executing an users' client computing devices when the users connect their client computing devices to external display devices. Such a request may indicate that one or more external display devices have been connected to a client computing device and may identify the display configuration for the one or more external display devices and an internal display device. The adaptive display engine can dynamically determine recommended settings based on the specified display configuration and return the recommended settings to the agent. The agent can then automatically apply the recommended settings on the client computing device.

Abstract: Embodiments of systems and methods for selecting and configuring grouped peripherals in shared workspaces are described. In an illustrative, non-limiting embodiment, an IHS may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the IHS to: group a plurality of devices available during a shared workspace session into a plurality of groups; transmit, to a remote service: (a) an indication of a performance metric, and (b) an indication of the plurality of groups; and receive, from the remote service, a selection of one device in each of the plurality of groups for use during the shared workspace session based, at least in part, upon the performance metric.

Abstract: Secure workspace servicing can be coordinated. A host agent on a user computing device can include a servicing manager plugin that is configured to interface with a workspace agent running in one or more secure workspaces deployed on the user computing device. The workspace agent can periodically report a status of the respective secure workspace to the servicing manager plugin. The servicing manager plugin can use the reported status to categorize each secure workspace in a critical workspace cluster or a non-critical workspace cluster. When the host agent received a servicing policy, the servicing manager plugin can coordinate the servicing of the secure workspaces using the critical and non-critical workspace clusters.