Abstract: An untrusted orchestrator function subsystem inventory and verification system includes an untrusted orchestrator device, an operating system, a BIOS, and a management device. In response to presentation by the untrusted orchestrator device of a function subsystem to the operating system during runtime, the operating system generates a function subsystem detection alert that identifies the function subsystem. In response to the function subsystem detection alert, the BIOS generates and transmits a BIOS inventory update. The management device receives the BIOS inventory update, and determines whether the operating system is authorized to use the function subsystem at least in part based on the BIOS inventory update. If so, the management device allows the operating system to utilize the function subsystem while, if not, the management device prevents the operating system from utilizing the function subsystem.

Abstract: A trusted orchestrator function subsystem inventory and verification system includes an OS, a BIOS, a management device, and a trusted orchestrator device. In response to presentation of a function subsystem to the OS during runtime, the OS generates a function subsystem detection alert that identifies the function subsystem. In response to the function subsystem detection alert, the BIOS generates and provides a BIOS inventory update that identifies the function subsystem. The management device receives the BIOS inventory update and, in response, forwards the BIOS inventory update. The trusted orchestrator device receives the BIOS inventory update and, in response, determine whether the function subsystem identified in the BIOS inventory update is included in a trusted function subsystem inventory.

Abstract: A method for processing trust and security for leased infrastructure includes: detecting a first audit event directed to the leased infrastructure; initiating, in response to detecting the first audit event, an execution of a first trust audit; making a first determination, based on a result of the first trust audit, that the first audit event is a verified event; and transmitting, in response to the first determination and to a computing device of a user leasing the leased infrastructure, first instructions for the computing device to display a first output notifying the user that the leased infrastructure is in a trusted domain.

Abstract: An information handling system includes a host bus adaptor (HBA) that receives a secured media device, and a processor that executes an operating system. In response to the operating system being booted, the baseboard management controller detects a hot plug insertion of the secure media device into the information handling system. The baseboard management controller retrieves a key for the secured media device. In response to the retrieving of the key, the baseboard management controller unlocks the secured media device. The baseboard management controller triggers an enumeration of the secured media device. In response to the trigger, a host bus adaptor driver of the processor enumerates the secured media device.

Abstract: An information handling system includes a host bus adaptor (HBA) that receives a secured media device, and a processor that executes an operating system. In response to the operating system being booted, the baseboard management controller detects a hot plug insertion of the secure media device into the information handling system. The baseboard management controller retrieves a key for the secured media device. In response to the retrieving of the key, the baseboard management controller unlocks the secured media device. The baseboard management controller triggers an enumeration of the secured media device. In response to the trigger, a host bus adaptor driver of the processor enumerates the secured media device.

Abstract: In accordance with embodiments of the present disclosure, an information handling system may include a plurality of information handling resources and a controller communicatively coupled to the plurality of information handling resources. The controller may be configured to monitor for the presence of a thermal escape event of the information handling system. The controller may also be configured to, responsive to detecting the presence of the thermal escape event, determine one or more affected information handling resources of the plurality of information handling resources, wherein the one or more affected information handling resources comprise information handling resources thermally affected by the thermal escape event. The controller may further be configured to determine for each of the one or more affected information handling resources a respective thermal excursion timeout period.

Abstract: A system including first and second information handling systems may implement: a virtual bridge associated with a network information handling resource, a virtual machine to access the resources of the first information handling system; a virtualization environment to migrate the virtual machine from the first to the second information handling system using the virtual bridge; a first virtual function mapping the network information handling resource and the first information handling system; a second virtual function mapping the network information handling resource and the second information handling system; and a physical function mapping the network information handling resource and a chassis management controller. The physical function may be a Peripheral Component Interconnect Express (PCIe) I/O Virtualization (IOV) physical function.

Abstract: In accordance with embodiments of the present disclosure, an information handling system may include a plurality of information handling resources a controller communicatively coupled to the plurality of information handling resources, and a software-based controller. The controller may be configured to monitor for environmental factors associated with the plurality of information handling resources, calculate a health ranking of the plurality of information handling resources based on the environmental factors, and communicate the health ranking to a software-based controller for managing communication to the information handling resources. The software-based controller may include executable instructions configured to, when read and executed by a processor, redirect communication associated with the plurality of information handling resources based on the health ranking.

Abstract: In accordance with embodiments of the present disclosure, a system may include a storage controller for managing virtual storage resources and physical storage resources of one or more information handling systems. The storage controller may be configured to, responsive to removal of a physical storage resource owned by the storage controller from a first information handling system broadcast a request to one or more other information handling systems to determine if the physical storage resource has been relocated to a second information handling system. The storage controller may also be configured to, responsive to receiving a reply from the second information handling system indicating that the physical storage resource has been relocated to the second information handling system, operate in concert with a second storage controller of the second information handling system to use the data of the physical storage resource.

Abstract: In accordance with embodiments of the present disclosure, an information handling system may include a plurality of information handling resources a controller communicatively coupled to the plurality of information handling resources, and a software-based controller. The controller may be configured to monitor for environmental factors associated with the plurality of information handling resources, calculate a health ranking of the plurality of information handling resources based on the environmental factors, and communicate the health ranking to a software-based controller for managing communication to the information handling resources. The software-based controller may include executable instructions configured to, when read and executed by a processor, redirect communication associated with the plurality of information handling resources based on the health ranking.

Abstract: In accordance with embodiments of the present disclosure, an information handling system may include a plurality of information handling resources and a controller communicatively coupled to the plurality of information handling resources. The controller may be configured to monitor for the presence of a thermal escape event of the information handling system. The controller may also be configured to, responsive to detecting the presence of the thermal escape event, determine one or more affected information handling resources of the plurality of information handling resources, wherein the one or more affected information handling resources comprise information handling resources thermally affected by the thermal escape event. The controller may further be configured to determine for each of the one or more affected information handling resources a respective thermal excursion timeout period.

Abstract: In accordance with embodiments of the present disclosure, a system may include a storage controller for managing virtual storage resources and physical storage resources of one or more information handling systems. The storage controller may be configured to, responsive to removal of a physical storage resource owned by the storage controller from a first information handling system broadcast a request to one or more other information handling systems to determine if the physical storage resource has been relocated to a second information handling system. The storage controller may also be configured to, responsive to receiving a reply from the second information handling system indicating that the physical storage resource has been relocated to the second information handling system, operate in concert with a second storage controller of the second information handling system to use the data of the physical storage resource.

Abstract: A method for managing migration of a virtual machine includes accessing a first information handling system and a second information handling system, accessing a network information handling resource, using one or more switches to virtualize access of the network information handling resource to the first information handling system and the second information handling system, accessing a virtual bridge associated with the network information handling resource, accessing a virtual machine configured to access the resources of the first information handling system, and copying the operational state of the virtual machine from the first information handling system to the second information handling system using the first virtual bridge. The first information handling system and the second information handling system share the network information handling resource using the virtualized access.

Abstract: A method for managing migration of a virtual machine includes accessing a first information handling system and a second information handling system, accessing a network information handling resource, using one or more switches to virtualize access of the network information handling resource to the first and second information handling systems, accessing a virtual bridge associated with the network information handling resource, accessing a virtual machine configured to access the resources of the first information handling system, and copying the operational state of the virtual machine from the first information handling system to the second information handling system using the first virtual bridge.

Abstract: A method for managing migration of a virtual machine includes accessing a first information handling system and a second information handling system, accessing a network information handling resource, using one or more switches to virtualize access of the network information handling resource to the first information handling system and the second information handling system, accessing a virtual bridge associated with the network information handling resource, accessing a virtual machine configured to access the resources of the first information handling system, and copying the operational state of the virtual machine from the first information handling system to the second information handling system using the first virtual bridge. The first information handling system and the second information handling system share the network information handling resource using the virtualized access.

Abstract: One or more chassis management controllers housed in a modular chassis may be configured to (i) monitor a first information handling resource allocated to one or more modular information handling systems engaged in the chassis to determine if a triggering event associated with the first information handling resource occurs; (ii) in response to the triggering event, allocate a substitute information handling resource for the one or more information handling systems to which the first information handling resource is allocated; and (iii) in response to the triggering event, deallocate the first information handling resource from the one or more information handling systems to which the first information handling resource is allocated.