Abstract: An information handling system includes a device capable of sending and receiving security protocol and data model messages. A management controller with an authorization role as a designated leader is configured to verify authenticity of the device, discover authorization capabilities of the device, and set the authorization role of the device as a follower.

Abstract: An information handling system may include a host system, a management controller configured to provide out-of-band management of the information handling system, and a network interface controller including a network interface controller storage resource. The management controller may be configured to: receive, from the host system, a first identifier that is specific to an operating system (OS) of the host system; compare the first identifier to a second identifier provided by the network interface controller, wherein the second identifier is specific to an OS of the network interface controller that is stored on the network interface controller storage resource; and in response to a mismatch between the first identifier and the second identifier, prevent the network interface controller from operating.

Abstract: An information handling system may include a processor, a data processing unit communicatively coupled to the processor, a logic device communicatively coupled to processor and configured to, responsive to a shutdown event associated with the information handling system, cause a power system of the information handling system to maintain delivery of electrical energy to the data processing unit until receiving a command to cause withdrawal of the electrical energy to the data processing unit, and a management controller communicatively coupled to the processor, the data processing unit, and the logic device, and configured for out-of-band management of the information handling system.

Abstract: Embodiments of systems and methods for high-availability (HA) management networks for High Performance Computing (HPC) platforms are described. In some embodiments, an HPC platform may include a first Baseboard Management Controller (BMC) having a first network port; and a hardware accelerator comprising a second BMC having a second network port, where at least one of: (a) the first BMC is configured to share the first network port with the second BMC in response to a determination that the second network port has failed or has insufficient bandwidth, or (b) the second BMC is configured to share the second network port with the first BMC in response to a determination that the first network port has failed or has insufficient bandwidth.

Abstract: An information handling system may include a host system, a management controller configured to provide out-of-band management of the information handling system, and a network interface controller. The management controller may be configured to: determine an inventory of the network interface controller, the inventory indicating at least one component having a firmware; retrieve a firmware update image for updating the firmware; and cause the network interface controller to boot from the firmware update image, the firmware update image being configured to install an update to the firmware.

Abstract: An information handling system may include a processor, a management controller communicatively coupled to the processor and configured for out-of-band management of the information handling system, and a smart network interface card communicatively coupled to the processor and the management controller and configured to receive telemetry information from telemetry sources of the information handling system and perform advanced processing of the telemetry information.

Abstract: An information handling system may include a management controller configured to provide out-of-band management of the information handling system. The information handling system may further include a network interface controller. The management controller may be configured to: receive management data from the network interface controller; and redirect the management data to a remote console.

Abstract: An information handling system may include a host system, a management controller configured to provide out-of-band management of the information handling system, and a network interface controller including a network interface controller storage resource. The management controller may be configured to: receive, from the host system, a first identifier that is specific to an operating system (OS) of the host system; compare the first identifier to a second identifier provided by the network interface controller, wherein the second identifier is specific to an OS of the network interface controller that is stored on the network interface controller storage resource; and in response to a mismatch between the first identifier and the second identifier, prevent the network interface controller from operating.

Abstract: An information handling system may include a management controller configured to provide out-of-band management of the information handling system, and a network interface controller comprising a network interface controller storage resource. The management controller may be configured to: receive an update bundle cryptographically signed by a manufacturer of the information handling system, wherein the update bundle includes at least one signature associated with a network interface controller operating system (OS) configured to be executed by the network interface controller; and transmit the at least one signature to the network interface controller. The network interface controller may be configured to install the network interface controller OS to the network interface controller storage resource based on the at least one signature.

Abstract: An information handling system may include a processor, a subsystem communicatively coupled to the processor, and a management controller communicatively coupled to the processor and the subsystem and configured for out-of-band management of the information handling system, the management controller further configured to, in response to an alternating current power cycle of the information handling system: cause a basic input/output system of the information handling system to pause its boot process prior to enumeration of functions of the subsystem; and upon completion of the boot process of the subsystem and initialization of virtual functions of the subsystem, cause the basic input/output system to unpause the boot process in order to enumerate the functions of the subsystem including the virtual functions.

Abstract: An information handling system may include a processor, a data processing unit communicatively coupled to the processor, a logic device communicatively coupled to processor and configured to, responsive to a shutdown event associated with the information handling system, cause a power system of the information handling system to maintain delivery of electrical energy to the data processing unit until receiving a command to cause withdrawal of the electrical energy to the data processing unit, and a management controller communicatively coupled to the processor, the data processing unit, and the logic device, and configured for out-of-band management of the information handling system.

Abstract: Embodiments of systems and methods for high-availability (HA) management networks for High Performance Computing (HPC) platforms are described. In some embodiments, an HPC platform may include a first Baseboard Management Controller (BMC) having a first network port; and a hardware accelerator comprising a second BMC having a second network port, where at least one of: (a) the first BMC is configured to share the first network port with the second BMC in response to a determination that the second network port has failed or has insufficient bandwidth, or (b) the second BMC is configured to share the second network port with the first BMC in response to a determination that the first network port has failed or has insufficient bandwidth.

Abstract: An information handling system may include a processor, a management controller communicatively coupled to the processor and configured for out-of-band management of the information handling system, and a smart network interface card communicatively coupled to the processor and the management controller and configured to receive telemetry information from telemetry sources of the information handling system and perform advanced processing of the telemetry information.

Abstract: An information handling system may include a processor, a management controller communicatively coupled to the processor and configured for out-of-band management of the information handling system, and a smart network interface card communicatively coupled to the processor and the management controller, and configured to obtain a secret for authenticating the smart network interface card to the management controller, request an access token reference from the management controller, the request including the secret and an identifier of the smart network interface card in order to authenticate the smart network interface card to the management controller, in response to the request for the access token reference, receive the access token reference, and communicate a management task request to the management controller using the access token reference.

Abstract: An information handling system may include a processor, a smart network interface card communicatively coupled to the processor, a basic input/output system configured to be the first code executed by the processor when the information handling system is booted and configured to initialize components of the information handling system into a known state, and a management controller configured for out-of-band management of the information handling system. The management controller may further configured to communicate information regarding the smart network interface card to a provisioning server, receive parameters from the provisioning server for a network-based boot of the smart network interface card, and communicate the parameters to the smart network interface card to enable the smart network interface card to boot from an image stored at the provisioning server.

Abstract: A method includes determining, during auxiliary power operating mode of an information handling system, devices connected to peripheral component interconnect (PCI) slots and identifying, via a controller of the IHS, when a Virtual Ethernet Bridge (VEB) is present on a first communication path, which indicates that a high power consuming device with sideband enablement is present in a corresponding one of the PCI slots. The method includes configuring, via the first communication path, an uplink port on the VEB, collecting information about the VEB, including a VEB MAC address and capabilities of the VEB, setting a VLAN/MAC filter rule for NC-SI pass-through in the VEB, and configuring an intermediate device within a second communication path between the controller and the VEB for NC-SI pass-through utilizing a management MAC address, enabling NC-SI pass-through of traffic routed between the controller and the VEB.

Abstract: An information handling system includes a device capable of sending and receiving security protocol and data model messages. A management controller with an authorization role as a designated leader is configured to verify authenticity of the device, discover authorization capabilities of the device, and set the authorization role of the device as a follower.

Abstract: A network interface card includes a memory configured to store a credential associated with one of a manufacturer of the network interface card, a particular manufacturer of the server that includes the network interface card, or another manufacturer of an enclosure that holds the network interface card. A processor performs network discovery to identify devices in a local area network, performs port configuration, and establishes a secure network connection with a cloud service broker. Subsequent to the establishment of the secure network connection, the processor submits a provisioning request to the cloud service broker, receives a response to the provisioning request, and applies the security policies to the network interface card, wherein the security policies are for the devices of the local area network.

Abstract: An information handling system includes a basic input/output system configured to update an attribute of a system-wide firmware downgrade security policy prior to booting to an operating system of the information handling system. The attribute of the system-wide firmware downgrade security policy is used to determine whether to allow or to disallow downgrade of a firmware to a version. A processor may perform the downgrade of the firmware, wherein the downgrade of the firmware includes the processor further configured to check the attribute of the system-wide firmware downgrade security policy and to store a firmware image in a scratchpad. If the attribute of the system-wide firmware downgrade security policy allows the downgrade of the firmware to the version, then the processor may continue with the downgrade of the firmware otherwise discard the firmware image in the scratchpad.

Abstract: A network interface card includes a memory configured to store a credential associated with one of a manufacturer of the network interface card, a particular manufacturer of the server that includes the network interface card, or another manufacturer of an enclosure that holds the network interface card. A processor performs network discovery to identify devices in a local area network, performs port configuration, and establishes a secure network connection with a cloud service broker. Subsequent to the establishment of the secure network connection, the processor submits a provisioning request to the cloud service broker, receives a response to the provisioning request, and applies the security policies to the network interface card, wherein the security policies are for the devices of the local area network.