Abstract: Systems and methods provide multi-channel transmission of a firmware image to a hardware component of an IHS (Information Handling System), where the firmware image is transmitted by a remote access controller of the IHS that supports remote management of the IHS. Upon a firmware being initiated, the remote access controller determines an available bandwidth of a first signaling pathway of the hardware component and also determines an available bandwidth of a second signaling pathway of the hardware component. One portion of the firmware image is transmitted to the hardware component using the first signaling pathway, where a size of that portion is selected based on the available bandwidth of the first signaling pathway. Another portion of the firmware image is transmitted to the hardware component using the second signaling pathway, where a size of that portion is selected based on the available bandwidth of the second signaling pathway.

Abstract: Systems and methods prevent nonsecure updates to firmware of an IHS (Information Handling System). During factory provisioning of the IHS, a manifest of firmware loaded for operating a hardware component of the IHS is digitally signed by a remote access controller of the IHS, and the signed manifest is stored to the IHS. Once the IHS has been deployed and during an interval where the IHS does not have access to external networks by which to validate a received firmware update, the signed manifest of loaded firmware is retrieved and used to determine whether the received firmware update is compatible with the loaded firmware of the hardware component. When the update is compatible with the loaded firmware, at least a portion of the loaded firmware is replaced with the firmware update and an updated manifest is digitally signed to reflect availability of the update for use by the hardware component.

Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a firmware update image associated with the firmware device, determine that the firmware update image possesses a critical sub-image portion, and schedule a firmware update to be performed in the future on the firmware device using the one firmware update image. The firmware update image conforms to a Platform Level Data Model (PLDM) protocol that is configured to perform rebootless firmware updates.

Abstract: Systems and methods include a remote access controller of an IHS (Information Handling System) that provides remote management of the IHS. The remote access controller initiates an update of firmware used to operate a hardware component of the IHS by transmitting a firmware image to the hardware component via a first signaling pathway connecting the remote access controller to the hardware component. The remote access controller detects a failure in transmission of the firmware image to the hardware component via the first signaling pathway and identifies a second signaling pathway connecting the remote access controller to the hardware component. The remote access controller resumes transmission of the firmware image to the hardware component via the second signaling pathway and the firmware used to operate the hardware component is updated using the transmitted firmware image.

Abstract: In various embodiments, a remote access controller supporting remote management of an Information Handling System (IHS). The remote access controller receives a first firmware image comprising first firmware for a first hardware component of the IHS. A personality of the first firmware is determined and at least a portion of the first firmware is stored to a first region of a persistent storage of the first hardware component, where the first region is designated as storing firmware for adapting the first hardware component to the first personality. In response to a detected reconfiguration of the IHS, the remote access controller generates a notification of the first firmware that is stored by the first hardware component and that is usable to adapt operation of the first hardware component to the first personality.

Abstract: On power-up, self-encrypting drives (SEDs, 150) are unlocked one after another in an order based on the SEDs' unlocking priorities. In determining the priorities, one or more of the following factors are taken into account: (1) the content stored on the SEDs; the SEDs storing the OS are given higher priorities; (2) the SEDs' access history on previous power-ups: if a SED was accessed earlier than other SEDs, then this SED is given a higher priority; (3) whether there is an access request pending for a SED. Such prioritization allows the system to reach full functionality faster on power-ups. Other features are also provided.

Abstract: An information handling system may include a processor, one or more storage resources communicatively coupled to the processor, including at least one of the one or more storage resources communicatively coupled to the processor via a storage interface, and a basic input/output system (BIOS) comprising a program of instructions executable by the processor and configured to cause the processor to initialize one or more information handling resources of the information handling system. The BIOS may be further configured to, in response to a request to perform a firmware update to the one or more storage resources, scan for storage resources communicatively coupled to the processor via the storage interface, register unique identifiers associated with the storage resources communicatively coupled to the processor via the storage interface, and perform a firmware update of the storage resources communicatively coupled to the processor via the storage interface based on the unique identifiers.

Abstract: A system includes a storage device having a first encryption protocol, and a controller having a second encryption protocol. A processor implements the first encryption protocol or the second encryption protocol based on a strength of each encryption protocol, a topology of the system, a federal information processing standard certification status, a virtualization support, a multi-key support, a multi-band support, and an enterprise key management server support. Storage transactions may be encrypted using the implemented encryption protocol.

Abstract: An information handling system may include a processor, one or more storage resources communicatively coupled to the processor, including at least one of the one or more storage resources communicatively coupled to the processor via a storage interface, and a basic input/output system (BIOS) comprising a program of instructions executable by the processor and configured to cause the processor to initialize one or more information handling resources of the information handling system. The BIOS may be further configured to, in response to a request to perform a firmware update to the one or more storage resources, scan for storage resources communicatively coupled to the processor via the storage interface, register unique identifiers associated with the storage resources communicatively coupled to the processor via the storage interface, and perform a firmware update of the storage resources communicatively coupled to the processor via the storage interface based on the unique identifiers.

Abstract: Multiple IHSs (Information Handling Systems) may be installed as components of a chassis that has access to a plurality of storage devices via a chassis management controller. An IHS requests configuration of a virtual storage profile, such as a RAID configuration. A remote access controller of the IHS determines physical storage requirements for implementing the requested virtual storage profile. Based on the physical storage requirements, the chassis management controller selects storage devices from idle storage devices mapped to one of the storage controllers installed in one of the IHSs supported by a chassis management controller. The selected storage devices are mapped to the storage controller and used to implement the virtual storage profile. The chassis management controller manages a global pool of spares from the idle storage device for virtual storage profiles supported by the supported storage controllers.

Abstract: Periods of interoperability of sideband buses prevent effective management of managed devices by a remote access controller. Embodiments avoid periods of inoperability of sideband buses and recover the sideband bus without resetting the managed devices or the IHS (Information Handling System). The remote access controller configures timer and transmits the timer to a managed device. The managed device monitors the sideband for messages for the remote access controller. If no messages are received before expiration of the timer, the managed device resets its sideband bus endpoint, without resetting the managed device.

Abstract: A system includes a storage device having a first encryption protocol, and a controller having a second encryption protocol. A processor implements the first encryption protocol or the second encryption protocol based on a strength of each encryption protocol, a topology of the system, a federal information processing standard certification status, a virtualization support, a multi-key support, a multi-band support, and an enterprise key management server support. Storage transactions may be encrypted using the implemented encryption protocol.

Abstract: Cryptographic affinities are generated to improve security in server environments. One or more cryptographic affinities protect electronic data stored within a blade server. The cryptographic affinities are generated based on hashing a unique blade identifier and a unique identifier assigned to a network interface. The cryptographic affinities thus govern read, write, and other access operations. If any cryptographic affinity fails to match historical observance, then access to the blade server may be denied.

Abstract: On power-up, self-encrypting drives (SEDs, 150) are unlocked one after another in an order based on the SEDs' unlocking priorities. In determining the priorities, one or more of the following factors are taken into account: (1) the content stored on the SEDs; the SEDs storing the OS are given higher priorities; (2) the SEDs' access history on previous power-ups: if a SED was accessed earlier than other SEDs, then this SED is given a higher priority; (3) whether there is an access request pending for a SED. Such prioritization allows the system to reach full functionality faster on power-ups. Other features are also provided.

Abstract: Systems and methods for managing Serial Attached Small Computer System Interface (SAS) traffic with storage monitoring are described. In some embodiments, an Information Handling System (IHS) may include an embedded controller (EC) and a memory coupled to the EC, the memory having program instructions stored thereon that, upon execution, cause the EC to: designate a first Baseband Management Controller (BMC) as active; designate a second BMC as passive; and receive, from the active BMC, monitoring data relating to one or more of a plurality of storage devices without receiving the monitoring data from the passive BMC.

Abstract: Multiple IHSs (Information Handling Systems) may be installed as components of a chassis that has access to a plurality of storage devices via a chassis management controller. An IHS requests configuration of a virtual storage profile, such as a RAID configuration. A remote access controller of the IHS determines physical storage requirements for implementing the requested virtual storage profile. Based on the physical storage requirements, the chassis management controller selects storage devices from idle storage devices mapped to one of the storage controllers installed in one of the IHSs supported by a chassis management controller. The selected storage devices are mapped to the storage controller and used to implement the virtual storage profile. The chassis management controller manages a global pool of spares from the idle storage device for virtual storage profiles supported by the supported storage controllers.

Abstract: Periods of interoperability of sideband buses prevent effective management of managed devices by a remote access controller. Embodiments avoid periods of inoperability of sideband buses and recover the sideband bus without resetting the managed devices or the IHS (Information Handling System). The remote access controller configures timer and transmits the timer to a managed device. The managed device monitors the sideband for messages for the remote access controller. If no messages are received before expiration of the timer, the managed device resets its sideband bus endpoint, without resetting the managed device.

Abstract: Cryptographic affinities are generated to improve security in server environments. One or more cryptographic affinities protect electronic data stored within a blade server. The cryptographic affinities are generated based on hashing a unique blade identifier and a unique identifier assigned to a network interface. The cryptographic affinities thus govern read, write, and other access operations. If any cryptographic affinity fails to match historical observance, then access to the blade server may be denied.

Abstract: Systems and methods for managing Serial Attached Small Computer System Interface (SAS) traffic with storage monitoring are described. In some embodiments, an Information Handling System (IHS) may include an embedded controller (EC) and a memory coupled to the EC, the memory having program instructions stored thereon that, upon execution, cause the EC to: designate a first Baseband Management Controller (BMC) as active; designate a second BMC as passive; and receive, from the active BMC, monitoring data relating to one or more of a plurality of storage devices without receiving the monitoring data from the passive BMC.