Abstract: A method includes saving state information in response to receiving a system management interrupt (SMI), the state information including a first value retrieved from a first register and a second value retrieved from a second register. The method further includes determining a function associated with the SMI based on the first value and determining a calling address associated with the SMI based on the second value. A counter corresponding to the function and calling address pair is incremented in response to receiving the SMI. The method concludes by selectively invoking the function based on the value of the counter and based on a predetermined threshold.

Abstract: Systems and methods adjust workspaces based on available hardware resource of an IHS (Information Handling System) by which a user operates a workspace supported by a remote orchestration service. A security context and a productivity context of the IHS are determined based on reported context information. A workspace definition for providing access to a managed resource is selected based on the security context and the productivity context. A notification specifies a hardware resource of the IHS that is not used by the workspace definition, such as a microphone or camera that has not been enabled for use by workspaces. A productivity improvement that results from the updated productivity context that includes use of the first hardware resource is determined. Based on the productivity improvement, an updated workspace definition is selected that includes use of the first hardware resource in providing access to the managed resource via the IHS.

Abstract: Systems and methods for detecting IHS attacks by monitoring chains of configuration changes made to Basic Input/Output System (BIOS) or Unified Extensible Firmware Interface (UEFI) attributes are described. In some embodiments, an IHS may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the IHS to: monitor a chain of BIOS/UEFI configuration changes; compare the chain of BIOS/UEFI configuration changes against an Indication of Attack (IoA); and report an alert in response to the chain of BIOS/UEFI configuration changes matching the IoA.

Abstract: In one or more embodiments, one or more systems, methods, and/or processes may provide low power state entry signals to multiple devices of an information handling system. After providing the low power state entry signals to the multiple devices, the one or more systems, methods, and/or processes may receive a first status signal from a first device of the multiple devices within an amount of time; may determine that the first status signal from the first device was received within the amount of time; may determine that a second status signal from a second device of the multiple devices was not received within the amount of time; may log that the first status signal from the first device was received within the amount of time; and may log that the second status signal from the second device was not received within the amount of time.

Abstract: In some examples, a software agent may request a token from a server. The request may include dock identifiers associated with one or more docks, credentials, and actions to be performed by the one or more docks. The server may determine, using an access control list, whether the credentials authorize the software agent to instruct the one or more docks to perform the actions. If the server determines that the software agent is authorized, then the server may send a token to the software agent. The software agent may send an action request to the one or more docks. The action request may include the token and the actions. Each dock that receives the request may attempt to validate the token. If the dock successfully validates the token, the dock may perform the actions and send a message to the software agent indicating a result of performing the actions.

Abstract: Systems and methods for remotely applying battery management policies based on local user behavior. In an illustrative, non-limiting embodiment, an Information Handling System (IHS) may include: a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to: receive a battery management policy from a remote server; and apply the battery management policy to the IHS, wherein the battery management policy is selected based upon a local user's behavior.

Abstract: Systems and methods are provided that may be implemented to control flow integrity during systems management mode (SMM). The systems and methods may be implemented to restrict access by a given SMI function to specific regions of dynamic system memory by blocking unauthorized access to data or code regions of the system memory that are not needed by the SMI function so as to protect the rest of the system memory and system.

Abstract: Systems and methods that may be implemented to use encryption to isolate SMI functions, libraries and data from each other, such as during operation of systems management mode (SMM). Isolation of SMI function, library and data (and limitation of SMI function/library privileges) may be achieved in SMI at runtime by decrypting only that code and data needed for performing the required action/s in response to a SMI received from a calling process by a host processor (e.g., CPU).

Abstract: In one or more embodiments, one or more systems, methods, and/or processes may receive, independently of a processor of the information handling system (IHS), first credential management information and may modify, independently of the processor and based on the first credential management information, credential information stored via a secure object store of the IHS. For example, modifying the credential information may include modifying the credential information such that the IHS denies access to at least a portion of the IHS based on the credential information. In one instance, denying access to at least the portion of the IHS may include disabling at least one of password, biometric information associated with a user, and an encryption key. In another instance, denying access to at least the portion of the IHS may include remapping, independently of the processor, at least one human interface device.

Abstract: A method and information handling system including a first universal serial bus (USB) type C port for transceiving SMBus data multiplexed over unused USB-2 pins from a host information handling system, a first multiplexer for demultiplexing the SMBus as a designated data bus to a second multiplexer to create a designated bus for management controller transport protocol data, the second multiplexer re-multiplexing the SMBus designated bus to a second USB type C port for connection with an out-of-band management hardware system network interface card of a device connected to the second USB type C port for communication of management controller transport protocol data with the information handling system host and bypassing a docking station high capacity connector multiplex controller, and an embedded controller for activating the first multiplexer and the second multiplexer upon detecting the connection with the out-of-band management hardware system network interface card via the second USB type C port and est

Abstract: In one or more embodiments, one or more systems, methods, and/or processes may provide low power state entry signals to multiple devices of an information handling system. After providing the low power state entry signals to the multiple devices, the one or more systems, methods, and/or processes may receive a first status signal from a first device of the multiple devices within an amount of time; may determine that the first status signal from the first device was received within the amount of time; may determine that a second status signal from a second device of the multiple devices was not received within the amount of time; may log that the first status signal from the first device was received within the amount of time; and may log that the second status signal from the second device was not received within the amount of time.

Abstract: Systems and methods for remotely applying battery management policies based on local user behavior. In an illustrative, non-limiting embodiment, an Information Handling System (IHS) may include: a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to: receive a battery management policy from a remote server; and apply the battery management policy to the IHS, wherein the battery management policy is selected based upon a local user's behavior.

Abstract: A system and method operating a convertible information handling system comprising a processor executing code instructions for a modular dynamic wireless power control system for detecting an active wireless link operating via an antenna system and a first orientation mode, wherein the transmission power of the antenna system is limited to a regulatory safety maximum depending on orientation, the processor determining the permitted regulatory safety maximum transmission power for the first orientation mode for the information handling system and the processor determining relative transmission activity levels for the information handling system relative to the first active wireless link and the second active wireless link, including a first wireless link data rate transmission level for the first antenna system and a second wireless link data rate transmission level for the second antenna system.

Abstract: A system and method operating a convertible information handling system comprising a processor executing code instructions for a modular dynamic wireless power control system for detecting an active wireless link operating via an antenna system and a first orientation mode, wherein the transmission power of the antenna system is limited to a regulatory safety maximum depending on orientation, the processor determining the permitted regulatory safety maximum transmission power for the first orientation mode for the information handling system and the processor determining relative transmission activity levels for the information handling system relative to the first active wireless link and the second active wireless link, including a first wireless link data rate transmission level for the first antenna system and a second wireless link data rate transmission level for the second antenna system.

Abstract: In one aspect a disclosed method may include determining, by an information handling system, a future predicted system time that an unattended task is to be executed on the information handling system. The future predicted system time is based at least in part on first usage parameters for a user indicating first periods of usage activity, second periods of inactivity associated with the information handling system recorded during a first duration, and critical system parameters relevant to the present state of the information handling system. The method may also include ensuring that system resources of the information handling system are available for the unattended task to be able to complete. In response to the arrival of the future predicted system time, the unattended task is executed.

Abstract: In one or more embodiments, one or more systems, methods, and/or processes may receive, independently of a processor of the information handling system (IHS), first credential management information and may modify, independently of the processor and based on the first credential management information, credential information stored via a secure object store of the IHS. For example, modifying the credential information may include modifying the credential information such that the IHS denies access to at least a portion of the IHS based on the credential information. In one instance, denying access to at least the portion of the IHS may include disabling at least one of password, biometric information associated with a user, and an encryption key. In another instance, denying access to at least the portion of the IHS may include remapping, independently of the processor, at least one human interface device.

Abstract: A method for transferring files between information handling systems is disclosed. The method includes receiving, at an information handling system, a selection of a file, requesting, by the information handling system, nearby information handling systems in response to the selection of the file, and receiving coordinate information and contact information for the nearby information handling system from a server. The method also includes calculating a sector of a room based on the coordinate information for the nearby information handling systems and information about the information handling system, receiving a pass file indicator, and in response to the pass file indicator being aligned with the sector, sending the file to an identified information handling system of the sector.

Abstract: A method and information handling system including a first universal serial bus (USB) type C port for transceiving SMBus data multiplexed over unused USB-2 pins from a host information handling system, a first multiplexer for demultiplexing the SMBus as a designated data bus to a second multiplexer to create a designated bus for management controller transport protocol data, the second multiplexer re-multiplexing the SMBus designated bus to a second USB type C port for connection with an out-of-band management hardware system network interface card of a device connected to the second USB type C port for communication of management controller transport protocol data with the information handling system host and bypassing a docking station high capacity connector multiplex controller, and an embedded controller for activating the first multiplexer and the second multiplexer upon detecting the connection with the out-of-band management hardware system network interface card via the second USB type C port and est

Abstract: A boot recovery system includes a serial peripheral interface (SPI) storage that stores a primary boot block. A primary SPI controller is connected to the SPI storage through a primary SPI bus. An embedded controller (EC) includes an EC storage that stores a recovery boot block. The EC is coupled to the primary SPI bus through a secondary SPI bus. The EC is configured to determine that the primary boot block should be replaced, retrieve the recovery boot block from the EC storage, replace the primary boot block in the SPI storage with the recovery boot block through the secondary SPI bus, and initiate an information handling system (IHS) reboot process. The determining, retrieving, replacing, and initiating may be performed by the EC while a processing system that is coupled to the primary SPI controller is not in an operating mode.

Abstract: An information handling system includes a first processor, a second processor, and a third processor. The first processor requests a single-factor authentication from the second processor. The second processor receives a first authentication factor in response to the single-factor authentication request and requests a multi-factor authentication from the third processor. The third processor receives a second authentication factor in response to the multi-factor authentication request and provides the second authentication factor to the second processor. The second processor further verifies the first authentication factor and the second authentication factor and provides a single-factor authentication reply to the first processor in response to verifying the first authentication factor and the second authentication factor.