Abstract: Secure workspaces can be supported in heterogenous environments. Snapshots of secure workspaces can be created when the secure workspaces are deployed on a user's primary user computing device. When a user desires to access secure workspaces on a secondary user computing device, information about and a trust for the secondary user computing device can be determined. Based on the information and the trust, it can then be determined how the snapshots of the secure workspaces will be used to make the secure workspaces available to the secondary user computing device. In some cases, a best-known configuration for a secure workspace can be determined and applied.

Abstract: End-to-end distributed recovery of a user computing device on which secure workspaces are deployed is provided. An image of a user computing device and images of secure workspaces deployed on the user computing device can be created and stored. In response to a crash of the user computing device, a combined image can be created from the image of the user computing device and the images of the secure workspaces deployed on the user computing device. The combined image can then be deployed on the user computing device to recover the user computing device.

Abstract: A method of onboarding provisioning of a managed client information handling system, comprising a hardware processor executing code instructions of an endpoint onboarding agent to detecting a powering up process and automatically establish a first restricted bootstrap wireless wide-area network (WWAN) wireless link using a stored temporary provisional bootstrap embedded subscriber identity module (eSIM), identifying the managed client information handling system via the first restricted bootstrap WWAN wireless link to a remote information technology (IT) management server to trigger a second regular access WWAN wireless link for the managed client information handling system, provisioning a regular access eSIM profile to access the second regular access WWAN wireless link, and upon verified login credentials at an enterprise identity provider, downloading designated software applications for onboarding installation on the managed client information handling system.

Abstract: Adaptive display association and placement for secure workspaces in a multi-display environment is provided. A secure workspace display manager can be configured to detect displays available on a user computing device and, in conjunction with a host agent, identify applications that are running inside secure workspaces deployed on the user computing device. The secure workspace display manager can use characteristics of the available displays and an application type of the applications running in the secure workspaces to create application-to-display mappings that will maximize the user experience in the multi-display environment. The secure workspace display manager can then move windows of the applications in accordance with the application-to-display mappings.

Abstract: A seamless login experience can be provided in a companion mobile application. When a user launches a mobile app on his mobile computing device, a login handler of the mobile app can establish a proximity channel with a user computing device on which the user is logged into a desktop application for which the mobile app is a companion application. The login handler can send a mobile user ID to a login plugin on the user computing device. If the mobile user ID matches a user ID used to log the user into the desktop application, the login plugin can provide a token to the login handler. The login handler can then use the token to obtain a session token that can be used to log the user into the mobile app.

Abstract: Notifications can be provided across user devices. A notification gateway can be configured to receive notification requests from a variety of publishers. The notification requests can identify a channel type over which notifications should be sent to user devices that an administrator uses. The notification gateway can deliver each notification request to a topic that is associated with the defined channel type. Dispatchers subscribed to the topics can receive the notification requests. Each dispatcher can use the content of a notification request to generate and send notifications over the respective channel type to each user device used by an administrator identified in the notification request.

Abstract: Systems and methods for deploying software updates in hybrid workspace environments are described. In some embodiments, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to: consolidate an Operating System (OS) and Basic Input/Output System (BIOS) inventory with a plurality of workspace inventories; resolve dependencies among a plurality of updates based upon the consolidated inventories to identify an order of deployment; and deploy the plurality of updates in the order of deployment.

Abstract: Disclosed methods for enabling flexible policies for user access to BIOS attribute settings perform operations including creating a BIOS attribute map encompassing one or more configurable BIOS attributes, generating a role-based authorization table associating an authorization role to each of the configurable BIOS attributes, and deploying the role-based authorization table to an information handling system. Responsive to a user launching a BIOS attribute configuration tool, a user role associated with the user is detected and the role-based authorization table is retrieved. Based on the role-based authorization table and the user role, configurable BIOS attributes for the user are identified. The configurable BIOS attributes may then be presented to the BIOS configuration to enable the user to perform configuration operations for the configurable BIOS attributes.

Abstract: Shared hoteling workspaces and computer equipment are preconfigured based on location. A location associated with a mobile device is monitored. As the mobile device moves toward a workspace, computer peripheral equipment assigned to the workspace are identified and a best known configuration is retrieved. As the mobile device continues moving toward the workspace, the mobile device installs the best known configuration. Location-based policies and configuration events are defined and executed to ensure the best known configuration is timely installed. When the mobile device arrives at the workspace, the mobile device has been automatically configured to the computer peripheral equipment at the workspace. The mobile device is thus preconfigured, perhaps just in time, for immediate productivity and optimum user experience. Moreover, when the location of the mobile device no longer matches the workspace, the best known configuration may be automatically deleted to conserve memory.

Abstract: Systems and methods for providing continuity of audio and/or video (A/V) presets across different contexts are described. In an embodiment, an Information Handling System (IHS), may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to: identify a first audio or video setting used by a first audio or video device in a first context; normalize the first audio or video setting into a normalized setting; in response to a determination that the IHS is in a second context, translate the normalized setting into a second audio or video setting; and apply the second audio or video setting to a second audio or video device.

Abstract: Systems and methods for providing continuity of audio and/or video (A/V) presets across different contexts are described. In an embodiment, an Information Handling System (IHS), may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to: identify a first audio or video setting used by a first audio or video device in a first context; normalize the first audio or video setting into a normalized setting; in response to a determination that the IHS is in a second context, translate the normalized setting into a second audio or video setting; and apply the second audio or video setting to a second audio or video device.

Abstract: Embodiments of systems and methods for selecting and configuring grouped peripherals in shared workspaces are described. In an illustrative, non-limiting embodiment, an IHS may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the IHS to: group a plurality of devices available during a shared workspace session into a plurality of groups; transmit, to a remote service: (a) an indication of a performance metric, and (b) an indication of the plurality of groups; and receive, from the remote service, a selection of one device in each of the plurality of groups for use during the shared workspace session based, at least in part, upon the performance metric.

Abstract: Secure workspace servicing can be coordinated. A host agent on a user computing device can include a servicing manager plugin that is configured to interface with a workspace agent running in one or more secure workspaces deployed on the user computing device. The workspace agent can periodically report a status of the respective secure workspace to the servicing manager plugin. The servicing manager plugin can use the reported status to categorize each secure workspace in a critical workspace cluster or a non-critical workspace cluster. When the host agent received a servicing policy, the servicing manager plugin can coordinate the servicing of the secure workspaces using the critical and non-critical workspace clusters.

Abstract: Systems and methods for transitional isolation of applications using a workspace environment are described. The system for managing workspaces includes computer-executable instructions to determine whether the application is included in a list of approved applications, and when the application is not included in the list, generate an isolated workspace and deploy the application in the isolated workspace. The system may then provide the isolated workspace that has been deployed with the application for use by the user.

Abstract: Best known configurations for workspaces can be managed. Device groups can be defined based on functional roles or organizational departments. Each device group can be associated with a workspace along with a best known configuration for the workspace that is based on the device group. Workspaces can then be deployed to the end-user computing devices based on the device group to which each end-user computing device belongs and in accordance with the associated best known configuration.

Abstract: Systems and methods for mitigating Information Handling System (IHS) startup latency in hoteling environments due to driver and firmware updates are described. In an embodiment, an IHS configured to: receive an indication of a selected one of a plurality of workspaces; in response to the indication, retrieve a list of driver or firmware updates corresponding to peripheral devices available in the selected workspace; identify a subset of driver or firmware updates among the list of driver or firmware updates based, at least in part, upon a comparison between the list of driver or firmware updates and a list of one or more drivers or firmware installed in the IHS; and initiate installation of the subset of one or more driver or firmware updates before the IHS arrives at the selected workspace.

Abstract: Micro swipes for generating custom user interface responses can be supported. A mobile application can include a micro swipe handler that is configured to detect when a user has performed a micro swipe on a user interface element. The micro swipe handler can interface with a micro swipe management service to determine if any custom user interface response to a micro swipe is associated with the user interface element. If so, the micro swipe management service can provide the custom user interface response to the micro swipe handler which in turn can update the user interface of the mobile application in accordance with the custom user interface response.

Abstract: Systems and methods for deploying software updates in heterogeneous workspace environments are described. The system for managing workspaces includes computer-executable instructions for obtaining multiple inventories corresponding to multiple workspaces of an IHS, wherein the inventories each include information associated with the applications deployed in its respective workspace. The instructions are further executed to, for each inventory, identify the workspace associated with the inventory, determine which of the applications are to be updated with new software, and deploy the determined new software to the identified workspace.

Abstract: Storage drives can be configured to provide a component ID. An update tool on an end user device can be configured to retrieve this component ID in response to receiving a catalog that defines available firmware updates and to use the retrieved component ID to dynamically identify which firmware update applies to a particular storage drive. The firmware update can then be installed on the storage drive. The update tool may also perform a health assessment to dynamically determine whether the storage drive's health is sufficient to proceed with a firmware update.

Abstract: Methods and systems are provided that may be implemented to methods and systems may be implemented to automatically identify types and status of vulnerabilities in identified software or firmware components (e.g., libraries), and then automatically deploy security vulnerability fixes (e.g., patches or updates) in these identified components across different affected software or firmware applications. In one example, the disclosed methods and systems may operate to dynamically and automatically aggregate identified third party software and/or firmware vulnerabilities into a centralized repository, and may be further implemented to automatically handle the roll out and deployment of vulnerability fixes to patch or update third party libraries to solve any security vulnerability reported on these third party libraries.