Abstract: A method may include responsive to a power event associated with an information handling system, intercepting the power event and holding a platform controller hub of the information handling system from completing the power event to prevent execution of code of a basic input/output system of the information handling system, attempting to verify image integrity of the basic input/output system, and allowing the platform controller hub to complete the power event to allow execution of the code of the basic input/output system responsive to successful verification of the image integrity of the basic input/output system.

Abstract: An information handling system may include a host system and a management controller configured to provide out-of-band management of the information handling system. The management controller may be configured to: receive, via a management bus of the management controller, a user login request for access to a first user account associated with the management controller; determine a second user account corresponding to the first user account, wherein the second user account is associated with a security policy; and provide the user access to the management controller via the first user account, wherein a privilege level of the provided access is based on a set of privileges associated with the second account.

Abstract: An information handling system may include a management controller configured to provide out-of-band management of the information handling system. The management controller may be configured to: receive a user indication of a desired interface; and set a target readiness level based on the user indication. Upon a subsequent boot of the management controller, the target readiness level may be configured to cause the management controller to prioritize initialization of the desired interface such that the desired interface is made ready prior to a different, non-desired interface.

Abstract: An information handling system may include a host system comprising a processor and a management controller communicatively coupled to the processor, the management controller comprising firmware having a security module configured to enforce access control in accordance with a security policy.

Abstract: A management system for an information handling system includes a memory device and a management controller. The memory device includes a primary firmware image and a backup firmware image. The management controller boots the management system. The boot of the management system includes a read of a first block at an offset within the primary firmware image. The management controller further determines that the read of the first block had a first read error, and reboots the management system in response to determining that the read of the first block had the first read error. The reboot of the management system includes a read of a second block at the offset within the backup firmware image.

Abstract: An information handling system may include a host system comprising a host system processor and an information handling resource communicatively coupled to the host system processor and configured to manage firmware versions of the information handling resource by, in response to receiving a firmware update image: (i) comparing the firmware update image to an existing version of firmware of the information handling resource; (ii) storing differences between the firmware update image and the existing version of firmware of the information handling resource as a firmware patch image; and (iii) applying the firmware update image to the existing version of firmware of the information handling resource as a firmware patch image to emulate the firmware update image.

Abstract: Presented are scalable systems and methods for dynamically and incrementally updating a file system to patch firmware in an embedded device deployed in the field. In various embodiments, advantageously, the update and release process of, e.g., Linux-based firmware may be accomplished by using a simplified patching process that updates the firmware without having to update or replace the entire file system. As a result, a patch, e.g., security fix to existing firmware in the field, can be provided to customers relatively quickly, e.g., prior to a full firmware release that incorporates the fix is made available later on, thereby, eliminating traditional, full-image upgrades that are subject to time consuming release cycles, space constraints, and other limitations.

Abstract: An information handling system may include a host system comprising a processor and a management controller communicatively coupled to the processor, the management controller comprising firmware having a security module configured to enforce access control in accordance with a security policy.

Abstract: Embodiments are directed to a security panel configured to interface with virtual sensors. The security panel includes a sensor subsystem configured to receive sensor input from a plurality of physical sensors. A virtual sensor subsystem is configured to receive a virtual sensor input from an enrolled virtual sensor source as a virtual sensor and provide the virtual sensor input to the sensor subsystem. A monitoring subsystem is configured to provide an alert based on detection of an alert condition associated with at least one of the physical sensors and to provide the alert based on detection of a virtual alert condition associated with the virtual sensor.

Abstract: Embodiments are directed to a security panel configured to interface with virtual sensors. The security panel includes a sensor subsystem configured to receive sensor input from a plurality of physical sensors. A virtual sensor subsystem is configured to receive a virtual sensor input from an enrolled virtual sensor source as a virtual sensor and provide the virtual sensor input to the sensor subsystem. A monitoring subsystem is configured to provide an alert based on detection of an alert condition associated with at least one of the physical sensors and to provide the alert based on detection of a virtual alert condition associated with the virtual sensor.