Abstract: Secure component verification for use in an information processing system environment is disclosed. For example, a method comprises storing a public key associated with a first component of a system on a second component of the system, and storing a public key associated with the second component on the first component. The public key associated with the first component and the public key associated with the second component are usable to respectively verify a trustworthiness of a replacement for the first component and a replacement for the second component.

Abstract: Methods and systems for verifying component loadouts are disclosed. During onboarding and after onboarding, the hardware component loadouts of endpoint devices may be checked to identify whether component drift has occurred. The checks may be performed by comparing actual loadouts to expected loadouts. The expected loadouts may be identified using loadout established when an endpoint device is manufactured, as well as authorized changes in the loadouts that may be made by various owners. The initial loadout and authorized changes may be documented usings cryptographically verifiable data structures that form chains back to a root of trust.

Abstract: Methods and systems for managing operation of data processing systems are disclosed. To manage operation of the data processing systems, the data processing systems may present unified communication and management systems. The unified communication and management systems may be used to manage the operation of any number of management controller embedded devices hosted by the data processing systems. The unified communication and management systems may be implemented using access to the management controller embedded devices.

Abstract: Methods and systems for managing operation of data processing systems are disclosed. To manage operation of the data processing systems, the data processing systems may present unified communication and management systems. The unified communication and management systems may be used to manage the operation of any number of management controller embedded devices hosted by the data processing systems. The unified communication and management systems may allow for communication with and management of the management controller embedded devices without requiring that the management systems directly interact with the management controller embedded devices.

Abstract: Methods and systems for managing operation of data processing systems are disclosed. To manage operation of the data processing systems, the data processing systems may present unified interfaces to management systems. The unified interfaces may be used to manage the operation of any number of end point presenting devices hosted by the data processing systems. The unified interface may allow for the end point presenting devices without requiring that the management systems directly interact with the end point presenting devices.

Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include first and second Remote Access Controllers (RACs) that each includes computer-executable instructions to receive, by the first RAC, a firmware update image associated with the device in which the firmware update image conforms to a PLDM specification. The first RAC may then, issue a command to the firmware device indicating that the firmware device is to request a firmware update from the first RAC in which the command includes information about the second RAC. The information indicates the ability of the second RAC to complete a transfer of the firmware update image when the first RAC partially completes the transfer of the firmware update image.

Abstract: An information handling system may include a host system comprising a host basic input/output system (BIOS); a management controller configured to provide out-of-band management of the information handling system; and an information handling resource including a plurality of components. The management controller may be configured to: query the information handling resource for information regarding capabilities that are supported by individual ones of the components; and provide an application programming interface (API) configured to allow access to the capabilities.

Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include first and second Remote Access Controllers (RACs) that each includes computer-executable instructions to receive, by the first RAC, a firmware update image associated with the firmware device, and commence transfer of the firmware update image to the firmware device to perform a firmware update on the firmware device using an update mode that restricts another update request to the firmware device until the first RAC finishes or cancels the firmware update. When the transfer is halted prior to completion, the program instructions cause the second RAC to determine where the firmware update image transfer was halted, and commence transferring the remainder of the firmware update image that has not yet been transferred to the firmware device.

Abstract: Systems and methods provide multi-modal based updates to firmware utilized by a hardware component of an IHS (Information Handling System), where the firmware updates are managed by a remote access controller of the IHS that provides remote management of the hardware component. The remote access controller receives a notification of an update to an agreement for utilization of the hardware component, where the agreement indicates firmware modes authorized for use by the hardware component. Firmware modes are identified that are locally stored by the hardware component. Any firmware modes are identified that are authorized for use by the hardware component based on the updated first agreement and that are not locally stored by the hardware component, and the identified firmware modes are retrieved for local storage by the hardware component. In this manner, firmware utilized in an IHS remains consistent with applicable service agreements.

Abstract: Systems and methods include a remote access controller of an IHS (Information Handling System) that provides remote management of the IHS. The remote access controller initiates an update of firmware used to operate a hardware component of the IHS by transmitting a firmware image to the hardware component via a first signaling pathway connecting the remote access controller to the hardware component. The remote access controller detects a failure in transmission of the firmware image to the hardware component via the first signaling pathway and identifies a second signaling pathway connecting the remote access controller to the hardware component. The remote access controller resumes transmission of the firmware image to the hardware component via the second signaling pathway and the firmware used to operate the hardware component is updated using the transmitted firmware image.

Abstract: Embodiments of systems and methods to provide a firmware update to multiple storage units configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a firmware update image associated with multiple devices configured in the IHS, identify two or more of the devices that are configured in a redundant configuration relative to one another, and perform the firmware update sequentially on the two or more devices.

Abstract: Systems and methods provide multi-channel transmission of a firmware image to a hardware component of an IHS (Information Handling System), where the firmware image is transmitted by a remote access controller of the IHS that supports remote management of the IHS. Upon a firmware being initiated, the remote access controller determines an available bandwidth of a first signaling pathway of the hardware component and also determines an available bandwidth of a second signaling pathway of the hardware component. One portion of the firmware image is transmitted to the hardware component using the first signaling pathway, where a size of that portion is selected based on the available bandwidth of the first signaling pathway. Another portion of the firmware image is transmitted to the hardware component using the second signaling pathway, where a size of that portion is selected based on the available bandwidth of the second signaling pathway.

Abstract: Systems and methods prevent nonsecure updates to firmware of an IHS (Information Handling System). During factory provisioning of the IHS, a manifest of firmware loaded for operating a hardware component of the IHS is digitally signed by a remote access controller of the IHS, and the signed manifest is stored to the IHS. Once the IHS has been deployed and during an interval where the IHS does not have access to external networks by which to validate a received firmware update, the signed manifest of loaded firmware is retrieved and used to determine whether the received firmware update is compatible with the loaded firmware of the hardware component. When the update is compatible with the loaded firmware, at least a portion of the loaded firmware is replaced with the firmware update and an updated manifest is digitally signed to reflect availability of the update for use by the hardware component.

Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include first and second Remote Access Controllers (RACs) that each includes computer-executable instructions to receive, by the first RAC, a firmware update image associated with the device in which the firmware update image conforms to a PLDM specification. The first RAC may then, issue a command to the firmware device indicating that the firmware device is to request a firmware update from the first RAC in which the command includes information about the second RAC. The information indicates the ability of the second RAC to complete a transfer of the firmware update image when the first RAC partially completes the transfer of the firmware update image.

Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a firmware update image associated with the storage unit, receive an indication that the storage unit requires a reboot of the IHS, and when the storage unit is experiencing minimal I/O usage, reset the storage unit using the firmware update image. The firmware update image is configured to perform rebootless firmware updates on the storage unit.

Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a target firmware update image associated with a first of the devices, establish a shared memory communication channel with the first device, store the target firmware update image in the shared memory communication channel, and using the shared memory communication channel, perform a firmware update on the first device using the stored target firmware update image.

Abstract: Centralized management of a Data Processing Unit (DPU) Baseboard Management Controller (BMC) through an integrated server remote access controller (iRAC) may include embedding a secure token in a communication from the iRAC to a BMC of a DPU, the secure token authorizing the iRAC to the DPU BMC and authorizing the DPU BMC to the iRAC. The secure token may include a first layer token authorizing the iRAC to the DPU and authorizing the DPU to the iRAC and a second layer token authorizing the DPU to the DPU BMC and authorizing the BMC to the DPU. Alternatively, the secure token may be generated by the iRAC generating an initial token authorizing the iRAC to the DPU and authorizing the DPU to the iRAC, the iRAC embedding the initial token in a request to the DPU for a resource of the DPU BMC and the DPU generating the secure token.

Abstract: Embodiments of the present disclosure provide a system and method for providing an input/output (I/O) attack prevention system and method for an Information Handling System (IHS) that is managed by a systems management console. One embodiment of the I/O device attack prevention system includes a systems manager in communication with multiple server IHSs configured in a data center. The IHS includes executable instructions to detect that an I/O device has been connected to an external I/O port of the IHS, and send information associated with the I/O device detection to the systems manager such that it determines whether the I/O device is authorized for use with the IHS. The IHS receives the results of the determination from the systems manager, and allows or disallows use of the I/O device with the IHS based on the results of the determination.

Abstract: Systems and methods for providing secure motherboard replacement techniques are described. In one embodiment, an Information Handling System (IHS) may include computer-executable instructions to, during a bootstrap process, obtain a remodeled vendor tracking certificate from a replacement motherboard in which the remodeled vendor tracking certificate comprising inventory information associated with a previous motherboard, and determine that the vendor tracking certificate includes information indicating that the replacement motherboard has replaced a previous motherboard.

Abstract: Embodiments provide unique identification of telemetry reports generated by components of an IHS (Information Handling System) that supports a plurality of metric data sources. A source of metric data is detected, where the source may be a fixed or replaceable IHS component. The metric source is identified within a device descriptor table maintained by a remote access controller of the IHS. Based on a unique user-friendly label that is associated with the metric data source in the device descriptor table, the metric source is configured to generate metric reports. The generated metric reports are received and the label provided by the metric source is used to store data from the metric reports in a database row using the label as a unique database key. The user-friendly label can be used to perform efficient database queries without using a separate database column for storing a user-friendly description of the metric source.