Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and a device are provided. The device determines one or more feature components of firmware of a BMC to be tested. The device also determines a respective QA category from a plurality of QA categories for each of the one or more feature components. Each of the plurality of QA categories is associated with a set of feature components and a set of the test cases. The device further determines respective at least one test case for each of the one or more feature components based on the respective QA category of the each feature component. The test case specifies hardware and a procedure to be used to test the each feature component.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and a device are provided. The device determines that a target event occurred at a first server in a group of servers that are jointly managed. The device obtains, for the first server, a public-private key pair including a first key and a second key. The device provides the first key to the first server such that the first server is accessible by authentication with the first key. The device provides the second key to a client device such that the first server is accessible by the client device by providing the second key to the server. Subsequently, the device revokes the first key from the first server.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and a device are provided. The device the package determination component 430 determines one or more packages distributed in firmware of a BMC. The device determines a respective update of each of the one or more packages. The device determines a first set of security vulnerabilities of the each package that is addressed by the respective update. The device further determines a second set of security vulnerabilities of the each package after the respective update is applied. The device generates a first file indicating the first set of security vulnerabilities and the second set of security vulnerabilities.

Abstract: Certain aspects direct to systems and methods for controlling heterogeneous internet of things (IoT) devices. The system includes a gateway device, which is communicatively connected to a control device under a first protocol and to multiple authenticated IoT devices under corresponding protocols. In operation, the gateway device receives a command from the control device, which is directed to a selected IoT device. Based on the command, the gateway device may select a corresponding API, and determine the corresponding network and the corresponding protocol specific for the selected IoT device. To send the command to the selected IoT device, the gateway device first determines whether the corresponding protocol for the selected IoT device is different from the first protocol. If so, the gateway device converts the command to a second command transmittable under the corresponding protocol for the selected IoT device, and sends the converted command to the selected IoT device.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a service processor. The service processor sends to a DHCP server a request-to-acquire for acquiring an IP address. The service processor then receives a response from the DHCP server. The response includes a first user name. The service processor further configures a user account in association with the first user name on the service processor. The user account allows access to the service processor.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and a device are provided. The device determines one or more feature components of firmware of a BMC to be tested. The device also determines a respective QA category from a plurality of QA categories for each of the one or more feature components. Each of the plurality of QA categories is associated with a set of feature components and a set of the test cases. The device further determines respective at least one test case for each of the one or more feature components based on the respective QA category of the each feature component. The test case specifies hardware and a procedure to be used to test the each feature component.

Abstract: Aspects of the disclosure relate to management node failover systems and methods. The system includes two management devices and a detection and reversal device. Each of the two management devices has a processor and a non-volatile memory storing computer executable code. The two management devices function respectively as an active node and a passive node. The detection and reversal device monitors status of the active node. When the active node fails, the detection and reversal device sends an activation signal to the passive node. The passive node, in response to receiving the active signal, switches from the passive node to the active node.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and a device are provided. The device determines that a target event occurred at a first server in a group of servers that are jointly managed. The device obtains, for the first server, a public-private key pair including a first key and a second key. The device provides the first key to the first server such that the first server is accessible by authentication with the first key. The device provides the second key to a client device such that the first server is accessible by the client device by providing the second key to the server. Subsequently, the device revokes the first key from the first server.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and a device are provided. The device the package determination component 430 determines one or more packages distributed in firmware of a BMC. The device determines a respective update of each of the one or more packages. The device determines a first set of security vulnerabilities of the each package that is addressed by the respective update. The device further determines a second set of security vulnerabilities of the each package after the respective update is applied. The device generates a first file indicating the first set of security vulnerabilities and the second set of security vulnerabilities.

Abstract: Certain aspects of the present disclosure are directed to an IPMI bridge server configured to expand the management functions of an IPMI control system to a plurality of non-IPMI protocol specific managed devices. The IPMI bridge server includes: a processor, a network interface controller assigned with a network address; and a memory containing a firmware. When the firmware is executed at the processor, it is configured to be in communication with a group of first protocol specific managed devices through a first protocol control point and a first communication link, and a group of second protocol specific managed devices through a second protocol control point and a second communication link, and to receive management requests each for performing a protocol specific management function at one of the group of first protocol specific managed devices or the group of second protocol specific managed devices.

Abstract: Certain aspects direct to systems and methods for preventing a thin client or a zero client from unauthorized physical access. A microcontroller is provided and connected to the chassis of the thin client or zero client computing device via a first interface, such as a general-purpose input/output (GPIO) line. Whenever the chassis is physically opened, the chassis generates a signal, and sends the signal to the microcontroller via the GPIO line. Upon receiving the signal, the microcontroller determines that a physical access event occurs to the computing device. Unless the physical access event is authorized, the microcontroller may generate a log to record events for the computing device, and store the log in the storage device; and perform a self-protect action to the computing device. If network connectivity is available, the microcontroller may send the log to a server via the network.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a BMC. The BMC stores an extended SEL record entry in a data repository. The extended SEL record entry including a locator to a data collection stored external to the data repository. The BMC further retrieves the data collection based on the locator in response to receiving a request-to-retrieve-an-SEL-record.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a service processor. The service processor receives, from a device remotely, a first facial feature data record of a user and a request to receive a KVM console flow of a host of the service processor. The service processor further authenticates the user based on the first facial feature data record. The service processor then redirects the KVM console flow to the device when the user is authenticated.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a service processor. The service processor receives, from a device remotely, a first fingerprint data record of a user and a request to receive a KVM console flow of a host of the service processor. The service processor further authenticates the user based on the first fingerprint data record. The service processor then redirects the KVM console flow to the device when the user is authenticated.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be an embedded-system device. The apparatus may be an embedded-system device. The embedded-system device emulates a first serial port. The embedded-system device exposes the first serial port to a host of the embedded-system device through a USB connection. The embedded-system device receives first USB packets containing first command or data from the host through the USB connection. The embedded-system device inputs the first command or data to the first serial port.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a management device. The management device obtains an organizational file of an executable program. The management device determines a list of libraries that are depended to execute the executable program. The management device obtains the list of libraries from one or more library collections. The library collections include at least one library that is not in the list of libraries. The management device constructs an embedded-system device with the executable program and the list of libraries without the at least one library.

Abstract: Certain aspects direct to systems and methods for cloud based platform simulation on virtual machine for development projects of a management controller. The system includes a cloud network, which include necessary computing resources to provide at least one virtual machine (VM), such that the at least one VM is accessible on the cloud network to simulate a management controller and a host computing device for the management controller. The at least one VM includes: a firmware module for the management controller, configured to receive at least one output signal from the host computing device; and a simulator module configured to simulate the host computing device. In operation, the simulator module generates the at least one output signal based on configuration data of the host computing device, and sends the at least one output signal to the firmware module.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a service processor. The service processor generates a first encryption key at runtime based on unique device data of the service processor and a first logic. The service processor refrains from storing the first encryption key in the storage device. The service processor further encrypts target data based on the encryption key and an encryption algorithm to obtain first encrypted data. The service processor then stores the first encrypted data in a storage device of the service processor.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be an embedded-system device. The embedded-system device emulates a USB device. The embedded-system device exposes the emulated USB device to a host of the embedded-system device through a USB connection. The embedded-system device receives data from BIOS of the host through the emulated USB device.

Abstract: Certain aspects direct to systems and methods for device or vendor independent network switch management on a management controller. The management controller is communicatively connected to a network switch through a Simple Network Management Protocol (SNMP) interface. The management controller receives parsed information of a management information base (MIB) file corresponding to the network switch, and establishes a communication between the management controller and the network switch through the SNMP interface based on the parsed information of the MIB file, in which the management controller functions as a client and the network switch functions as a server of the communication. Then the management controller receives an input to manage and configure the network switch, and manages and configures the network switch via the communication through the SNMP interface based on the input and the parsed information of the MIB file.