Abstract: A system can receive, in association with a user account, an operating system image that is encrypted with a private key, a manifest generated from a first instance of a manifest generator tool that is configured to identify system provisioning artifacts that is encrypted with the private key, and a public key. The system can install the operating system image on a computing device. The system can generate, with a second instance of the manifest generator tool, a first identification of system provisioning artifacts from the installing of the operating system image.

Abstract: An information handling system may include a processor, an interface configured for hot-insertion of information handling resources, and a management controller configured to provide out-of-band management of the information handling system. The management controller may be configured to: receive a first notification that an information handling resource has been hot-removed from the interface; and in response to the first notification, disable power to the interface to prevent initialization of an information handling resource that is hot-inserted at the interface.

Abstract: An information handling system may include a management controller configured to direct a basic input/output system to generate an advanced configuration power interface (ACPI) event that is triggered by an update of a host interface attribute. A processor provides at least one function to publish and configure a host interface, where the host interface is associated with a management service. The processor may also detect the ACPI event triggered by the update of the host interface attribute. Subsequent to the detection of the ACPI event, a structure of the host interface associated with the management service and a supported authentication type and security information associated with the supported authentication type may be determined. The processor may authenticate to the host interface via the supported authentication type using the security information and update an operating system variable associated with the update of the host interface attribute.

Abstract: An information handling system may include a processor, an interface configured for hot-insertion of information handling resources, and a management controller configured to provide out-of-band management of the information handling system. The management controller may be configured to: receive a first notification that an information handling resource has been hot-removed from the interface; and in response to the first notification, disable power to the interface to prevent initialization of an information handling resource that is hot-inserted at the interface.

Abstract: An information handling system may include a processor, a basic input/output system (BIOS) configured to initialize the information handling system, and a management controller coupled to the processor and configured to provide out-of-band management of the information handling system. The BIOS may be configured to: subsequent to initialization of an operating system of the information handling system, receive a notification that an information handling resource has been hot-inserted into the information handling system; and delay processing of the information handling resource by the operating system until the management controller has performed a platform-specific configuration change to the information handling resource.

Abstract: An information handling system may include a processor, a basic input/output system (BIOS) configured to initialize the information handling system, and a management controller coupled to the processor and configured to provide out-of-band management of the information handling system. The BIOS may be configured to: subsequent to initialization of an operating system of the information handling system, receive a notification that an information handling resource has been hot-inserted into the information handling system; and delay processing of the information handling resource by the operating system until the management controller has performed a platform-specific configuration change to the information handling resource.

Abstract: A method and system provide local key management for storage enclosures. The method includes retrieving first security content from a security vault of a service processor, then dynamically detecting a hardware interface communicatively coupled to the service processor. A data storage device, communicatively coupled to the hardware interface is dynamically detected. A dynamic determination is made as to whether the data storage device is a self-encrypting capable data storage device. In response to the data storage device being a self-encrypting capable data storage device, a second security content is retrieved from the data storage device, and a validation regarding an association between the first security content and the second security content is made. Finally, in response to a positive validation of the association between the first security content and the second security content, security keys are transmitted to the data storage device, and access to the data storage device is enabled.

Abstract: A method and system provide local key management for storage enclosures. The method includes retrieving first security content from a security vault of a service processor, then dynamically detecting a hardware interface communicatively coupled to the service processor. A data storage device, communicatively coupled to the hardware interface is dynamically detected. A dynamic determination is made as to whether the data storage device is a self-encrypting capable data storage device. In response to the data storage device being a self-encrypting capable data storage device, a second security content is retrieved from the data storage device, and a validation regarding an association between the first security content and the second security content is made. Finally, in response to a positive validation of the association between the first security content and the second security content, security keys are transmitted to the data storage device, and access to the data storage device is enabled.