Abstract: An information handling system may include at least one processor; and a memory coupled to the at least one processor. The information handling system may be configured to: execute an application on the at least one processor, wherein at least a portion of data of the application is stored encrypted in a secure enclave region of the memory; and securely transfer execution of the application to a second information handling system by: transmitting platform configuration register (PCR) measurement data to the second information handling system; and transmitting the data of the application to the second information handling system; wherein the PCR measurement data is usable by the second information handling system to perform a remote attestation, the remote attestation including verification of the PCR measurement data to confirm that the data of the application has not been changed.

Abstract: A node for a VSAN includes a BMC, a processor, and a plurality of VSAN objects. The processor instantiates a Cluster Membership, Monitoring, and Directory Service (CMMDS) and a BMC Service Module (SM). The CMMDS implements a Security Policy and Data Model (SPDM) architecture. The CMMDS determines an inventory list of the VSAN objects and a SPDM authentication state for each of the objects, and provides the inventory list and the SPDM authentication states to the BMC SM. The BMC SM provides the inventory list and the SPDM authentication state to the BMC. The BMC determines that a first VSAN object is not authenticated based upon the SPDM authentication state of the first VSAN object, and directs the CMMDS to halt input/output (I/O) operations on the VSAN to the first VSAN object.

Abstract: An Information Handling System (IHS) includes multiple hardware devices, and a baseboard Management Controller (BMC) in communication with the plurality of hardware devices. The BMC includes executable instructions for monitoring the operating characteristics a hardware device that is operating in a fixed pass-through configuration with a workspace in which the workspace has been instantiated by a workspace orchestration service executed on the IHS. The executable instructions may determine that the operating characteristics are indicative of a security breach of the fixed pass-through configuration, and as such, may perform an operation to quarantine the one hardware device when the fixed pass-through configuration is determined to possess the security breach.

Abstract: An information handling system cluster may include a first site located at a first geographical location and comprising a set of first management controllers, and a second site located at a second geographical location and comprising a set of second management controllers. The information handling system cluster may be configured to provide software-defined storage based on physical storage resources at the first site and the second site. The information handling system cluster may be further configured to execute a cluster management system configured to select individual ones of the set of first management controllers and the set of second management controllers to act as distributed witness nodes for the information handling system cluster.

Abstract: An information handling system may include at least one processor; and a memory coupled to the at least one processor. The information handling system may be configured to: execute an application on the at least one processor, wherein at least a portion of data of the application is stored encrypted in a secure enclave region of the memory; and securely transfer execution of the application to a second information handling system by: transmitting platform configuration register (PCR) measurement data to the second information handling system; and transmitting the data of the application to the second information handling system; wherein the PCR measurement data is usable by the second information handling system to perform a remote attestation, the remote attestation including verification of the PCR measurement data to confirm that the data of the application has not been changed.

Abstract: An information handling system may include a persistent memory module and a basic input/output system (BIOS). The information handling system may be configured to: prior to initialization of an operating system, receive, at a configuration application of the BIOS, configuration information regarding the persistent memory module; in response to the configuration information, allocate a first portion of the persistent memory module to volatile system memory of the information handling system, a second portion of the persistent memory module to non-volatile storage of the information handling system, and a third portion of the persistent memory module to a dynamic memory area; and after initialization of the operating system, execute a memory manager configured to alter sizes of the first portion, the second portion, and the third portion, wherein the altering is carried out without performing a reboot of the information handling system.

Abstract: A method for allocating virtual machines (VMs) to run within a non-uniform memory access (NUMA) system includes a first processing node and a second processing node. A request is received at the first processing node for additional capacity for at least one of (a) establishing an additional VM and (b) increasing processing resources to an existing VM on the first processing node. In response to receiving the request, a migration manager identifies whether the first processing node has the additional capacity requested. In response to identifying that the first processing node does not have the additional capacity requested, at least one VM is selected from an ordered array of the multiple VMs executing on the first processing node. The selected VM has low processor and memory usage relative to the other VMs. The selected VM is migrated from the first processing node to the second processing node for execution.

Abstract: In one embodiment, a system includes a device and first and second processors. The first and second processors are configured to access first information. The first information includes a first parameter and a second parameter. The first parameter is associated with a position of the device relative to the first processor. The second parameter is associated with a position of the device relative to the second processor. The system is configured to access second information associated with a virtual machine. The virtual machine is configured to run on a host operating system. The virtual machine includes a guest operating system configured to communicate with the device. The system is also configured to automatically select the first processor based at least on the first information and the second information and to associate the virtual machine with the first processor in response to automatically selecting the first processor.

Abstract: A method for allocating virtual machines (VMs) to run within a non-uniform memory access (NUMA) system includes a first processing node and a second processing node. A request is received at the first processing node for additional capacity for at least one of (a) establishing an additional VM and (b) increasing processing resources to an existing VM on the first processing node. In response to receiving the request, a migration manager identifies whether the first processing node has the additional capacity requested. In response to identifying that the first processing node does not have the additional capacity requested, at least one VM is selected from an ordered array of the multiple VMs executing on the first processing node. The selected VM has low processor and memory usage relative to the other VMs. The selected VM is migrated from the first processing node to the second processing node for execution.

Abstract: In one embodiment, a system includes a device and first and second processors. The first and second processors are configured to access first information. The first information includes a first parameter and a second parameter. The first parameter is associated with a position of the device relative to the first processor. The second parameter is associated with a position of the device relative to the second processor. The system is configured to access second information associated with a virtual machine. The virtual machine is configured to run on a host operating system. The virtual machine includes a guest operating system configured to communicate with the device. The system is also configured to automatically select the first processor based at least on the first information and the second information and to associate the virtual machine with the first processor in response to automatically selecting the first processor.

Abstract: A system to support external devices in relation to a server rack includes a server rack chassis having a plurality of sides. Each side has a pair of substantially vertical edges extending along a height of the server rack chassis. The system also includes a rail member having a first end coupled to the server rack chassis. The rail member is substantially parallel to the substantially vertical edges when the first end of the rail member is coupled to the server rack chassis. The system also includes a tray having a first aperture adapted to slidably receive a second end of the rail member.