Abstract: A method comprises sending a first command to a solid state drive (SSD), the first command indicating that the SSD can de-allocate a first plurality of logical block addresses (LBAs), and calculating first parity data for a redundant array of independent disks (RAID) array that includes the SSD in response to receiving a first reply from the SSD indicating that the first LBAs were de-allocated by the SSD. The first parity data is calculated based upon the first LBAs including all logical zeros.

Abstract: A system and method for managing the recovery key of a computer system is disclosed. The computer system includes a security layer, and the recovery key is stored locally to a memory location on the computer system, including, as examples, flash memory on the motherboard of the computer system or a USB port on the computer system. In operation, when it becomes necessary for the computer system to authenticate the recovery key, the recovery key may be retrieved from the local memory. The retrieval and storage of the recovery key may be managed by a remote administrator. The recovery key may be stored in a hidden partition in the storage location, and the recovery key may be cryptographically wrapped to add an additional layer of security.

Abstract: During execution of BIOS at an information handling system, a processor communicates with the storage controller via a command line protocol (CLP) communications channel. Via the channel, the processor obtains identification information for storage devices associated with the storage controller. The processor communicates the identification information to a key management client, which obtains encryption keys based on the identification information from a key management server. The processor receives the encryption keys, and communicates them to the storage controller via the CLP communications channel. The CLP communications channel thus provides a convenient and flexible interface for communication of security information prior to execution of an operating system.

Abstract: A method comprises sending a first command to a solid state drive (SSD), the first command indicating that the SSD can de-allocate a first plurality of logical block addresses (LBAs), and calculating first parity data for a redundant array of independent disks (RAID) array that includes the SSD in response to receiving a first reply from the SSD indicating that the first LBAs were de-allocated by the SSD. The first parity data is calculated based upon the first LBAs including all logical zeros.

Abstract: In accordance with the present disclosure, a method for dynamically configuring a target device comprises receiving by one or more ports of a target device one or more initiator identifiers from one or more initiators. The method further comprises determining whether a plurality of ports received initiator identifiers from a common initiator. The method further comprises configuring the plurality of the ports to operate as a single, logical port if the plurality of ports received initiator identifiers from a common initiator.

Abstract: In accordance with the present disclosure, a method for dynamically configuring a target device comprises receiving by one or more ports of a target device one or more initiator identifiers from one or more initiators. The method further comprises determining whether a plurality of ports received initiator identifiers from a common initiator. The method further comprises configuring the plurality of the ports to operate as a single, logical port if the plurality of ports received initiator identifiers from a common initiator.

Abstract: A credential caching system includes receiving a set of authentication credentials, storing the set of authentication credentials in a credential cache memory, wherein the credential cache memory is coupled with a management controller, and supplying the set of authentication credentials for automatic authentication during a reset or reboot. In the event of a security breach, the credential caching system clears the set of authentication credentials from the credential cache memory so that the set of authentication credentials may no longer be used for a reset or reboot.

Abstract: A system and method is disclosed for encoding a set of configuration data for a given expander and at some later point comparing the configuration data to a discovered configuration derived from an attempt to discover the operability of each phy or connection point of the storage system. The configuration identifies the phys or connection points that are operable and the mapping of operable connection points to wide ports communicatively of an expander.

Abstract: In accordance with the present disclosure, a method for dynamically configuring a target device comprises receiving by one or more ports of a target device one or more initiator identifiers from one or more initiators. The method further comprises determining whether a plurality of ports received initiator identifiers from a common initiator. The method further comprises configuring the plurality of the ports to operate as a single, logical port if the plurality of ports received initiator identifiers from a common initiator.

Abstract: In accordance with the present disclosure, a method for dynamically configuring a target device comprises receiving by one or more ports of a target device one or more initiator identifiers from one or more initiators. The method further comprises determining whether a plurality of ports received initiator identifiers from a common initiator. The method further comprises configuring the plurality of the ports to operate as a single, logical port if the plurality of ports received initiator identifiers from a common initiator.

Abstract: A system and method for managing the recovery key of a computer system is disclosed. The computer system includes a security layer, and the recovery key is stored locally to a memory location on the computer system, including, as examples, flash memory on the motherboard of the computer system or a USB port on the computer system. In operation, when it becomes necessary for the computer system to authenticate the recovery key, the recovery key may be retrieved from the local memory. The retrieval and storage of the recovery key may be managed by a remote administrator. The recovery key may be stored in a hidden partition in the storage location, and the recovery key may be cryptographically wrapped to add an additional layer of security.

Abstract: A system and method for accessing and identifying the security parameters of a device in an information handling system is disclosed. A device in a computer system may operate according to a defined security protocol, and multiple security protocols may exist across the devices of the system. In operation, a configuration capability is defined within the PCI Express communications protocol. This capability includes a capabilities data structure through which parameters concerning the security parameters of the device may be identified and passed to a processor.

Abstract: A system and method is disclosed for identifying the boot targets for an initiator port in point-to-point network, such as a Serial Attached SCSI network. In operation, the initiator port issues a command to an expander that is directly coupled to the initiator port. In response the expander identifies the expander of the network that includes a boot table that identifies the boot addresses associated with each of the initiator port. The boot addresses associated with the initiator port are returned to the initiator port in a ranked order, and the initiator port attempts to boot from the boot address locations until the initiator port successfully boots.

Abstract: A port width module operating in association with SAS controllers determines the operational state of communication across an SAS cable by comparing the number of links at opposing controllers that are capable of supporting communication with the number of links in DWord synchronization. For example, an information handling system capable of communication of four links at an SAS connector communicates in a normal state across two links where the opposing device is a switch that supports only two links at an SAS connector. An LED at the information handling system indicates normal operations with two links in DWord synchronization by receiving the port width of the opposing device, retrieving its own port width, and comparing the port widths with the number of links in DWord synchronization.

Abstract: During execution of BIOS at an information handling system, a processor communicates with the storage controller via a command line protocol (CLP) communications channel. Via the channel, the processor obtains identification information for storage devices associated with the storage controller. The processor communicates the identification information to a key management client, which obtains encryption keys based on the identification information from a key management server. The processor receives the encryption keys, and communicates them to the storage controller via the CLP communications channel. The CLP communications channel thus provides a convenient and flexible interface for communication of security information prior to execution of an operating system.

Abstract: A credential caching system includes receiving a set of authentication credentials, storing the set of authentication credentials in a credential cache memory, wherein the credential cache memory is coupled with a management controller, and supplying the set of authentication credentials for automatic authentication during a reset or reboot. In the event of a security breach, the credential caching system clears the set of authentication credentials from the credential cache memory so that the set of authentication credentials may no longer be used for a reset or reboot.

Abstract: The storage enclosure includes a number of storage drives, each of which is physically coupled to each of two controllers in the storage enclosure. A memory location associated with the storage enclosure includes a value. The value provides an indicator for grouping the storage drives with one of the two controllers and disabling communications between each storage controller and the storage drives not associated with the controller.

Abstract: A system and method is disclosed for identifying the storage drives of a computer network. An identifier associated with an element of the storage network is stored in nonvolatile memory and later retrieved. The identifier associates the elements of the storage network, allowing the storage drives of the storage enclosure to be associated with the storage enclosure itself.

Abstract: A port width module operating in association with SAS controllers determines the operational state of communication across an SAS cable by comparing the number of links at opposing controllers that are capable of supporting communication with the number of links in DWord synchronization. For example, an information handling system capable of communication of four links at an SAS connector communicates in a normal state across two links where the opposing device is a switch that supports only two links at an SAS connector. An LED at the information handling system indicates normal operations with two links in DWord synchronization by receiving the port width of the opposing device, retrieving its own port width, and comparing the port widths with the number of links in DWord synchronization.

Abstract: A system and method is disclosed for establishing a mirror configuration in a storage network. The storage network includes two storage drives that are coupled to one another according to a Serial Attached SCSI storage network interface. The storage drives determine whether the storage drives are coupled to one another. If it is determined that the storage drives are coupled to one another, the storage drives are configured in a mirror configuration in which write commands received at one of the drives are mirrored to the other drive.