Abstract: Methods and systems for managing operations for a data processing system are disclosed. To manage operations for the data processing system, a device update graph may be generated based on software component versions and dependency data associated with a requested update to be applied to the data processing system. A reverse topological analysis may be performed, using the device update graph, in order to identify different paths through the graph and corresponding cost for traversing each of the paths. A duration of time to complete application of the update may be identified based on the corresponding cost for each of the path. The duration of time (in isolation and/or including additional update information) may be used in obtaining an update plan for the data processing system. The update plan may be used in managing operations for the data processing system.

Abstract: A FaaS-based systems management method for implementing an onboarded management platform retrieves a manifest from a new or updated target device. The manifest indicates supported management operations and mapping coordinates for container images for performing management operations on the targeted device. Any unrecognized mappings in the manifest are added to a local FaaS mapping store and the target device is requested to push its container images to a local container registry. Communications with the target device may comply with an onboarding API that supports calls for retrieving the manifest and requesting the target device to push its container images to the local registry. An access credential token provided to the target device and included with the container images pushed to the local registry may enable the local registry to authenticate the container images. Verification that the local registry includes a container image for each mapping in the manifest may occur.

Abstract: Disclosed methods and systems for implementing serverless management of platform resources maintain a function-as-a-service (FaaS) mapping database associating a resource and management function combination with a locator identifying a container image for implementing management interactions required to perform the management function. When a FaaS request indicating a function-resource combination is detected, the applicable locator is retrieved from the mapping database and the corresponding container image is deployed. Each resource may correspond to a specific version of a specific make or model, e.g., a server model and a firmware version. API, protocol, and messaging specifics for performing the function on the resource are embedded in each container image.

Abstract: An apparatus comprises at least one processing device including a processor and a memory. The at least one processing device is configured to implement an agent application for supporting an authentication process between a client device and a web server over at least one network, to register the agent application with an operating system of the client device, and in conjunction with initiation of the authentication process via a web browser of the client device, to obtain a uniform resource identifier (URI) from the web server, the URI corresponding to a particular endpoint of the web server, and to make the URI accessible to the agent application via the operating system. The at least one processing device is further configured to carry out one or more authentication operations of the authentication process at least in part through interaction between the agent application and the particular endpoint of the web server.

Abstract: Selecting user access policies for a new system, by collecting user, access policy, and resource metadata for a plurality of other users storing data dictated by one or more access restriction policies. The collected metadata is anonymized with respect to personal identifying information, and is stored in an anonymized analytics database. The system receives specific user, access policy and resource metadata for the new system from a specific user, and matches the received specific user metadata to the collected metadata to identify an optimum access policy of the one or more access policies based on the assets and access restriction requirements of the new system. The new system is then configured with the identified optimum access policy as an initial configuration.

Abstract: Methods, systems, and computer programs encoded on computer storage medium, for verifying, by a mask ROM of a CPU of a first computing device and with fused keys included by the CPU, a boot loader that is included by a flash memory of the first computing device, in response to verifying the boot loader, verifying, by the boot loader and with boot loader keys included by the flash memory, a kernel included by the a memory device of the first computing device, in response to verifying the kernel, decrypting, by the kernel using a hidden root key (HRK) included by the CPU of the first computing device, a device unique certification (DUC) included by the flash memory, in response to decrypting the DUC, generating, by the first computing device, a proof-of-possession of the DUC.

Abstract: In accordance with embodiments of the present disclosure, a system may include a plurality of chassis, each chassis comprising a plurality of information handling systems and a private inter-chassis network configured to couple the plurality of chassis to one another. Each chassis of the plurality of chassis may be configured to advertise a message to the private inter-chassis network, the message comprising information regarding such chassis. The plurality of chassis may detect the presence of each other based on messages advertised from each chassis and the plurality of chassis may nominate a lead chassis from the plurality of chassis to serve as a single point of management of the system.

Abstract: Methods, systems, and computer programs encoded on computer storage medium, for verifying, by a mask ROM of a CPU of a first computing device and with fused keys included by the CPU, a boot loader that is included by a flash memory of the first computing device, in response to verifying the boot loader, verifying, by the boot loader and with boot loader keys included by the flash memory, a kernel included by the a memory device of the first computing device, in response to verifying the kernel, decrypting, by the kernel using a hidden root key (HRK) included by the CPU of the first computing device, a device unique certification (DUC) included by the flash memory, in response to decrypting the DUC, generating, by the first computing device, a proof-of-possession of the DUC.

Abstract: An information handling system may include a processor, a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the processor to: (i) responsive to a physical connection being made between components of a system comprising multiple information handling system chassis, receive a message; (ii) process information present in the message indicative of a topology of connectivity among the components of the system; and (iii) update a data structure defining the topology of connectivity of the various components of the system based on the information present in the message.

Abstract: In accordance with embodiments of the present disclosure, a system may include a plurality of chassis, each chassis comprising a plurality of information handling systems and a private inter-chassis network configured to couple the plurality of chassis to one another. Each chassis of the plurality of chassis may be configured to advertise a message to the private inter-chassis network, the message comprising information regarding such chassis. The plurality of chassis may detect the presence of each other based on messages advertised from each chassis and the plurality of chassis may nominate a lead chassis from the plurality of chassis to serve as a single point of management of the system.

Abstract: An information handling system may include a processor, a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the processor to: (i) responsive to a physical connection being made between components of a system comprising multiple information handling system chassis, receive a message; (ii) process information present in the message indicative of a topology of connectivity among the components of the system; and (iii) update a data structure defining the topology of connectivity of the various components of the system based on the information present in the message.