Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a firmware update image associated with the storage unit, receive an indication that the storage unit requires a reboot of the IHS, and when the storage unit is experiencing minimal I/O usage, reset the storage unit using the firmware update image. The firmware update image is configured to perform rebootless firmware updates on the storage unit.

Abstract: Systems and methods prevent nonsecure updates to firmware of an IHS (Information Handling System). During factory provisioning of the IHS, a manifest of firmware loaded for operating a hardware component of the IHS is digitally signed by a remote access controller of the IHS, and the signed manifest is stored to the IHS. Once the IHS has been deployed and during an interval where the IHS does not have access to external networks by which to validate a received firmware update, the signed manifest of loaded firmware is retrieved and used to determine whether the received firmware update is compatible with the loaded firmware of the hardware component. When the update is compatible with the loaded firmware, at least a portion of the loaded firmware is replaced with the firmware update and an updated manifest is digitally signed to reflect availability of the update for use by the hardware component.

Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include first and second Remote Access Controllers (RACs) that each includes computer-executable instructions to receive, by the first RAC, a firmware update image associated with the firmware device, and commence transfer of the firmware update image to the firmware device to perform a firmware update on the firmware device using an update mode that restricts another update request to the firmware device until the first RAC finishes or cancels the firmware update. When the transfer is halted prior to completion, the program instructions cause the second RAC to determine where the firmware update image transfer was halted, and commence transferring the remainder of the firmware update image that has not yet been transferred to the firmware device.

Abstract: Systems and methods provide multi-modal based updates to firmware utilized by a hardware component of an IHS (Information Handling System), where the firmware updates are managed by a remote access controller of the IHS that provides remote management of the hardware component. The remote access controller receives a notification of an update to an agreement for utilization of the hardware component, where the agreement indicates firmware modes authorized for use by the hardware component. Firmware modes are identified that are locally stored by the hardware component. Any firmware modes are identified that are authorized for use by the hardware component based on the updated first agreement and that are not locally stored by the hardware component, and the identified firmware modes are retrieved for local storage by the hardware component. In this manner, firmware utilized in an IHS remains consistent with applicable service agreements.

Abstract: Systems and methods provide multi-channel transmission of a firmware image to a hardware component of an IHS (Information Handling System), where the firmware image is transmitted by a remote access controller of the IHS that supports remote management of the IHS. Upon a firmware being initiated, the remote access controller determines an available bandwidth of a first signaling pathway of the hardware component and also determines an available bandwidth of a second signaling pathway of the hardware component. One portion of the firmware image is transmitted to the hardware component using the first signaling pathway, where a size of that portion is selected based on the available bandwidth of the first signaling pathway. Another portion of the firmware image is transmitted to the hardware component using the second signaling pathway, where a size of that portion is selected based on the available bandwidth of the second signaling pathway.

Abstract: Systems and methods include a remote access controller of an IHS (Information Handling System) that provides remote management of the IHS. The remote access controller initiates an update of firmware used to operate a hardware component of the IHS by transmitting a firmware image to the hardware component via a first signaling pathway connecting the remote access controller to the hardware component. The remote access controller detects a failure in transmission of the firmware image to the hardware component via the first signaling pathway and identifies a second signaling pathway connecting the remote access controller to the hardware component. The remote access controller resumes transmission of the firmware image to the hardware component via the second signaling pathway and the firmware used to operate the hardware component is updated using the transmitted firmware image.

Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include first and second Remote Access Controllers (RACs) that each includes computer-executable instructions to receive, by the first RAC, a firmware update image associated with the device in which the firmware update image conforms to a PLDM specification. The first RAC may then, issue a command to the firmware device indicating that the firmware device is to request a firmware update from the first RAC in which the command includes information about the second RAC. The information indicates the ability of the second RAC to complete a transfer of the firmware update image when the first RAC partially completes the transfer of the firmware update image.

Abstract: Embodiments of systems and methods to provide a firmware update to multiple storage units configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a firmware update image associated with multiple devices configured in the IHS, identify two or more of the devices that are configured in a redundant configuration relative to one another, and perform the firmware update sequentially on the two or more devices.

Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a target firmware update image associated with a first of the devices, establish a shared memory communication channel with the first device, store the target firmware update image in the shared memory communication channel, and using the shared memory communication channel, perform a firmware update on the first device using the stored target firmware update image.

Abstract: Centralized management of a Data Processing Unit (DPU) Baseboard Management Controller (BMC) through an integrated server remote access controller (iRAC) may include embedding a secure token in a communication from the iRAC to a BMC of a DPU, the secure token authorizing the iRAC to the DPU BMC and authorizing the DPU BMC to the iRAC. The secure token may include a first layer token authorizing the iRAC to the DPU and authorizing the DPU to the iRAC and a second layer token authorizing the DPU to the DPU BMC and authorizing the BMC to the DPU. Alternatively, the secure token may be generated by the iRAC generating an initial token authorizing the iRAC to the DPU and authorizing the DPU to the iRAC, the iRAC embedding the initial token in a request to the DPU for a resource of the DPU BMC and the DPU generating the secure token.

Abstract: Embodiments of the present disclosure provide a system and method for providing an input/output (I/O) attack prevention system and method for an Information Handling System (IHS) that is managed by a systems management console. One embodiment of the I/O device attack prevention system includes a systems manager in communication with multiple server IHSs configured in a data center. The IHS includes executable instructions to detect that an I/O device has been connected to an external I/O port of the IHS, and send information associated with the I/O device detection to the systems manager such that it determines whether the I/O device is authorized for use with the IHS. The IHS receives the results of the determination from the systems manager, and allows or disallows use of the I/O device with the IHS based on the results of the determination.

Abstract: Systems and methods for providing secure motherboard replacement techniques are described. In one embodiment, an Information Handling System (IHS) may include computer-executable instructions to, during a bootstrap process, obtain a remodeled vendor tracking certificate from a replacement motherboard in which the remodeled vendor tracking certificate comprising inventory information associated with a previous motherboard, and determine that the vendor tracking certificate includes information indicating that the replacement motherboard has replaced a previous motherboard.

Abstract: Embodiments provide unique identification of telemetry reports generated by components of an IHS (Information Handling System) that supports a plurality of metric data sources. A source of metric data is detected, where the source may be a fixed or replaceable IHS component. The metric source is identified within a device descriptor table maintained by a remote access controller of the IHS. Based on a unique user-friendly label that is associated with the metric data source in the device descriptor table, the metric source is configured to generate metric reports. The generated metric reports are received and the label provided by the metric source is used to store data from the metric reports in a database row using the label as a unique database key. The user-friendly label can be used to perform efficient database queries without using a separate database column for storing a user-friendly description of the metric source.

Abstract: An information handling system may include a host system comprising a host basic input/output system (BIOS); a management controller configured to provide out-of-band management of the information handling system; and an information handling resource including a plurality of components. The management controller may be configured to: query the information handling resource for information regarding capabilities that are supported by individual ones of the components; and provide an application programming interface (API) configured to allow access to the capabilities.

Abstract: An information handling system may include a management controller configured to provide out-of-band management of the information handling system. The information handling system may further include a network interface controller. The management controller may be configured to: receive management data from the network interface controller; and redirect the management data to a remote console.

Abstract: Systems and methods for real-time management of delta inventory certificates for component validation using eventing and cloud infrastructures are described. In an embodiment, an Information Handling System (IHS) may include: a processor, a Remote Access Controller (RAC) coupled to the processor, and a memory coupled to the RAC. The memory may have program instructions stored thereon that, upon execution by the RAC, cause the RAC to: determine that a component has been added to the IHS; in response to the addition, request that a delta inventory certificate be generated by a remote validation service; and receive a copy of the delta inventory certificate.

Abstract: Embodiments provide unique identification of telemetry reports generated by components of an IHS (Information Handling System) that supports a plurality of metric data sources. A source of metric data is detected, where the source may be a fixed or replaceable IHS component. The metric source is identified within a device descriptor table maintained by a remote access controller of the IHS. Based on a unique user-friendly label that is associated with the metric data source in the device descriptor table, the metric source is configured to generate metric reports. The generated metric reports are received and the label provided by the metric source is used to store data from the metric reports in a database row using the label as a unique database key. The user-friendly label can be used to perform efficient database queries without using a separate database column for storing a user-friendly description of the metric source.

Abstract: Examples disclosed herein relate to backing up persistent memory. There is at least one memory addressable by at least one processor. The persistent memory includes a persistent memory region with multiple portions. A secondary storage includes a first backup of the persistent memory region. Modifications to the persistent memory region are tracked. Updated portions associated with the modifications are written to the secondary storage.

Abstract: In one implementation, a call home system comprises a configuration engine, a cluster engine and an assignment engine. The configuration engine can identify a plurality of potential call home devices. The cluster engine can group a plurality of compute devices into a plurality of clusters. The assignment engine can assign a master call home device to each cluster. In another implementation, a method for calling home can comprise broadcasting a first message, receiving a response from a call home master associated with a cluster, and selecting a group identifier to append to a second message.