Abstract: A method for transferring messages from a producer element to a consumer element uses a memory shared between the producer element and the consumer element, and a hardware queue including several registers designed to contain addresses of the shared memory. The method includes the steps of storing each message for the consumer element in the shared memory in the form of a node of a linked list, including a pointer to a next node in the list, the pointer being initially void, writing successively the address of each node in a free slot of the queue, whereby the node identified by each slot of the queue is the first node of a linked list assigned to the slot, and when the queue is full, writing the address of the current node in memory, in the pointer of the last node of the linked list assigned to the last slot of the queue, whereby the current node is placed at the end of the linked list assigned to the last slot of the queue.

Abstract: A method for allocating a cloud-based media resource, comprising: receiving a cloud-based media task request with at least one parameter from a task requester; calculating a second integrated utility value by utilizing the at least one parameter; comparing the second integrated utility value with a first integrated utility value; determining whether to allocate the cloud-based media resource to the task requester according to a result of comparison. An apparatus for allocating a cloud-based media resource according to the present technology is also provided. In some illustrative embodiments, from the view of the utility improvement of cloud-based media services, an objective function is no longer a minimized response time but a maximum utility, and thus the satisfaction of cloud users can be significantly increased.

Abstract: A communication server, computer-readable storage medium, and computer-implemented method for executing commands embedded in messages are provided. The method may include accessing a message that is being routed through a communication server. The message may include a command operator that is operative to execute an action performed by a network-based service executing on an application server. The method may further include identifying the command operator included in the message, and transmitting a request to the application server to perform the action corresponding thereto.

Abstract: A computer-implemented method for migrating a buffer used for direct memory access (DMA) may include receiving a request to perform a DMA data transfer between a first partitionable endpoint and a buffer of a first memory in a system having two or more processor chips. Each processor chip may have an associated memory and one or more partitionable endpoints. The buffer from the first memory may be migrated to a second memory based on whether the first memory is local or remote to the first partitionable endpoint, and based on a DMA data transfer activity level. A memory is local to a partitionable endpoint when the memory and the partitionable endpoint are associated with a same processor chip. The DMA data transfer may then be performed.

Abstract: Denial-of-service attacks are prevented or mitigated in a cloud compute environment, such as a multi-tenant, collaborative SaaS system. This is achieved by providing a mechanism by which characterization of “legitimate” behavior is defined for accessor classes, preferably along with actions to be taken in the event an accessor exceeds those limits. A set of accessor “usage profiles” are generated. Typically, a profile comprises information, such as one or more “constraints,” and one or more “actions.” At least one constraint is generated by applying one or more parameters of a transaction weighting function such that the resulting constraint represents an actual or estimated cost of executing the transaction. An action defines how the system will respond if a particular constraint is triggered. By applying the constraints to accessor requests, the approach prevents over-utilization of compute resources.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for personalizing landing pages. In one aspect, a method includes generating, by one or more servers belonging to a first domain and for a request, a personalized landing page that includes the personalized landing page data, wherein the landing page belongs to the first domain, and the landing page includes at least one link to a resource of the first party that belongs to the second domain; and providing, by the one or more servers, the personalized landing page to the user device, wherein the personalized landing page, when processed by the user device, generates a personalized landing page environment that belongs to the first domain.

Abstract: One or more services for enhancing guest utilization of a virtual machine and other VDC resources may be provided at the intermediary manager. In an embodiment, the intermediary manager intercepts a hypercall from a guest operating system that is separate from the intermediary manager. The intermediary manager determines that a particular intermediary service is associated with the hypercall and causes execution of service instructions associated with the particular intermediary service. The intermediary manager and guest operating systems may operate within a virtual machine hosted by a host machine and managed by a hypervisor. Embodiments may be useful in any of a virtualized enterprise computer system; a virtual machine infrastructure in a private data center; computing, storage or networking resources in a private cloud; computing, storage or networking resources of cloud service provider; and a hybrid cloud computing environment.

Abstract: A system may include reception of an instruction to execute a business process from a client application, execution of the business process in a first software work process, and storage, during execution of the business process, of progress information associated with the business process within a memory. A system may further include reception, at a second software work process, of a request from the client application for progress information, retrieval, in the second software work process, of the progress information from the shared memory, reception, at the second software work process, of the progress information from the memory, and provision of the progress information to the client application from the second software work process.

Abstract: A file system is to be shared by multiple file servers according to respective different file server protocols, and the file system is to implement cross-protocol locking in access of file system objects of the file system. A file system denies access to a particular file system object from a first file server protocol in response to a data structure referred to by an inode indicating that an access from a second different file server protocol of the particular file system object is present.

Abstract: Methods and systems for managing storage shares in a virtual environment having a plurality of virtual machines are provided. The system includes a storage system for managing storage space for the storage shares and generating a quota report. The quota report shows an assigned quota for each storage share and actual storage used by each storage share. The assigned quota indicates an amount of designated storage space for each storage share. The system also includes a storage provider for obtaining the quota report from the storage system and filtering the quota report based on storage shares that are managed by the storage provider. The storage provider modifies a quota for a storage share based on a client request and notifies the storage system of the modification.

Abstract: An application instance staging method comprises installing a runtime environment for an application program pushed to a cloud client; installing dependency of the application program; reading an environment variable of the application program to identify a functional service bound to the application program; modifying the application program based on the functional service bound to the application program; and packaging the modified application program, runtime environment, and dependency into an executable droplet.

Abstract: Systems, methods, and other embodiments associated with intelligently gathering log messages are described. In one embodiment, a computer-implemented method includes collecting, by a logging handler associated with a component, log messages according to two different granularities for logging messages. The two different granularities include a fine granularity and a coarse granularity. Collecting the log messages according to the fine granularity includes storing log messages in an incident buffer. The method includes, in response to detecting an error at the component, (i) freezing the incident buffer to preserve log messages present in the incident buffer, and (ii) communicating log messages that are collected according to the coarse granularity that are stored in a regular buffer to a logging appliance.

Abstract: Write optimization for block-based storage performing snapshot operations may be implemented. Write requests for a particular data volume may be received for which a snapshot operation is in progress. A determination may be made as to whether a data chunk of the data volume modified as part of the write request has not yet been stored to a remote snapshot data store as part of the snapshot operation. For a data chunk that is to be modified and that has not yet been stored, the data chunk may be stored in a local in-memory volume snapshot buffer. Once the data chunk is stored in the in-memory volume snapshot buffer, the write request may be performed and acknowledged as complete. The data chunk may be sent to the remote snapshot data store asynchronously with regard to the acknowledgment of the write request.

Abstract: A method is provided for managing software. The method comprises: when a first version of a software development file in a first software development zone is modified, placing a record of the file in a log of modified files; when an attempt is made to open a second version of the file in a second software development zone, comparing an identity of the second version of the file to the log of modified files; and when a match is detected between the identity of the second version of the file and a record of a file in the log of modified files, providing to a computer terminal associated with the second software development zone a notification that indicates that a modification has been made to a version of the file and further indicates an identity of a software developer associated with the first software development zone.

Abstract: A device with multiple, co-existing, and independent environments interacting with a common kernel, and related methods of operation, are disclosed herein. In at least one embodiment, the device is a mobile device on which a run-time method is performed. The run-time method includes interpreting a first software application on a register-based virtual machine coupled to a kernel. The method additionally includes concurrently executing a second software application also coupled to the kernel, where the second software application is a compiled software application. The interpreting of the first software application is performed using a first library, and the executing of the second software application is performed using a second library.

Abstract: Methods, systems, and computer program products for preventing non-detectable data loss during site switchover are disclosed. A computer-implemented method may include receiving a request to perform a switchover from a first node to a second node, determining whether to place a storage volume involved in the switchover in a suspended state, setting the storage volume in the suspended state based on determining that the storage volume is to be placed in the suspended state, and maintaining the storage volume in the suspended state after completing the switchover. In an example, the storage volume may be placed in a suspended state based on examining a volume-specific attribute indicating whether the storage volume is to be suspended when involved in a switchover. In one example, each storage volume involved in a switchover may be placed in a suspended state when indicated as part of a switchover request.

Abstract: Managing a multi-version data record database is provided. A mapping is maintained between a logical record identifier and committed and uncommitted physical record identifiers corresponding to data records using an indirection mapping table. Entries are updated within an index to point to the logical record identifier instead of the committed and uncommitted physical record identifiers. The committed physical record identifier corresponding to a data record is read from the indirection mapping table to access a committed version of the data record while a writer is modifying the data record to prevent the writer from blocking a reader. An uncommitted physical record identifier corresponding to the data record is written in the indirection mapping table to insert a new uncommitted version of the data record within a data table while the reader is reading the committed version of the particular data record to prevent the reader from blocking the writer.

Abstract: Methods, apparatus and computer program products implement embodiments of the present invention that enable a controller of a storage device having storage media to perform one or more error recovery operations on the storage media, and to convey, while performing the one or more error recovery operations, a message indicating a status of the one or more error recovery operations to a host processor in communication with the storage device. Storage devices implementing embodiments of the present invention include hard disk drives and solid state disk drives.

Abstract: A signal processor includes a period detection section which detects that a period is currently used for communication of a frame; a pattern detection section which detects, from the received signal, a first signal pattern by which the end of communication of the frame is recognized; and an output processing section which outputs the received signal to a controller; configured to instruct, upon detection of the first signal pattern in the period being currently used for communication of a frame, the controller to halt startup of communication action of the next frame, until the period being currently used for communication of a frame comes to the end, to thereby reduce an event such that frames are transmitted from a plurality of communication devices simultaneously, and to thereby allow the communication action for the next frame to proceed correctly.

Abstract: Synchronization of data items between parties A and B. A maintains copies of data items and an A change count and a B change count for each data item. The A change count indicates the number of changes made by A, and the B change count indicates the number of changes made by B and known to A. After a synchronization trigger, A sends to B each data item that A has changed, plus the A change count and the B. change count for each sent data item. A receives from B each data item that B has changed, plus the A change count and the B change count for each received data item. A detects a conflict if the received A change count differs from the maintained A change count.

Abstract: To facilitate changing a system configuration and allow having high redundancy in a computer system connecting a plurality of nodes. A node includes a CPU and constitutes a computer system. The node executes one or more processes and including predetermined functions. The node includes a shared memory that stores system information including process information related to each process executed by each node, in a state accessible from each process of its own node. In the node, the system information including the process information related to each process of its own node is multicast to the other nodes. A shared memory control process of the node receives the system information multicast from the other nodes and stores the system information in the shared memory.

Abstract: A storage controller includes data transfer logic defined to enable block level data transfer between the storage controller and multiple types of storage media within a storage volume. The storage controller also includes adaptive logic defined to determine in real-time which of the multiple types of storage media in the storage volume is to be used to store a given data block received by the storage controller. The received data block is stored on a determined storage medium in the storage volume. The data transfer logic and the adaptive logic are defined to maintain a normal interface between the storage controller and an operating system in communication with the storage controller, such that the multiple types of storage media in the storage volume is not apparent to the operating system.

Abstract: The components of communication network device ingress systems and methods cooperate to manage information ingress and prevent denial of service attempts. A classifier classifies incoming information. A classification filter filters the information on a classification basis to prevent denial of service. The classification filter includes a classification filter counter for tracking the flow of information associated with the classification filter. A zero value in the classification filter counter indicates that a buffer capacity limit associated with the classification is reached. The counter permits information to flow to a packet buffer if the classification filter counter value is not zero and discards information if the classification filter counter value is zero. In one exemplary implementation the classification filter counter decrements a classification filter counter value when the information is placed in the buffer.

Abstract: A wireless media player and a related system and methodology are disclosed. One aspect of the wireless media player system pertains to a virtual connector system, apparatus, and method for the automatic establishment of wireless connectivity with other electronic devices. In one embodiment, the media player device employs the use of integrated Radio Frequency Identification (RFID) technology to exchange communication settings, media capability, and other parameters with an external device that also has integrated RFID technology. The automatic exchange of settings and other information via a proximity-based RFID data exchange allows a media player to quickly establish a secure communication link with another device via a commonly supported wireless protocol such as Ultra Wideband (UWB) or Bluetooth. Another aspect of the media player system pertains to a method of using the captured media capability of the connecting device to customize certain menu options and software parameters in the media player.

Abstract: A query language used to traverse a path in a graph-based model is provided. The system comprises a parsing module to parse a query comprising query phrases. The respective query phrases composed of an object-type identifier and a filter where the object-type identifier corresponds to respective repositories and the filter is used to identify at least a portion of the objects associated with the object-type in the respective repositories. A planning module identifies the respective repositories corresponding to the object-type identifier within each of the one or more query phrases and generates an execution plan describing data to be retrieved according to the respective repositories and results of a preceding query phrase within the query. A translation module translates the respective query phrases into respective translated queries that are readable by the respective repositories and including the filter. An execution module implements the execution plan using the translated queries.

Abstract: Embodiments relate to managing quiesce requests in a multi-processor system. Aspects of the embodiments include receiving a quiesce request at a quiesce controller from a requesting processor, the requesting processor being one of a plurality of processors in a multi-processor system, and determining that the quiesce request is not accepted by the quiesce controller. Aspects also include, based on the quiesce request being not accepted by the quiesce controller, generating a reject message configured to indicate that the quiesce request has been rejected, holding the reject message until a quiesce command is broadcast to the multi-processor system, the quiesce command based on a different quiesce request, and sending the reject message to the requesting processor based on the broadcast of the quiesce command being detected by the quiesce controller.

Abstract: A remote memory superpage is retained in a remote memory of the memory blade when reading the remote memory super page of the remote memory into a local memory.

Abstract: A remote processor is signaled for receiving a remote machine memory address (RMMA) space that contains data to be transferred. The RMMA space is mapped to a free portion of a system memory address (SMA) space of the remote processor. The entries of a page table corresponding to the address space are created.

Abstract: A standby system device 200 which is connected to an active system device 100 includes a process information sharing unit 203B and a standby process management unit 203C. The process information sharing unit 203B receives active side process information indicating usage of resources of an active system process 103A operating on the active system device 100 from the active system device 100. The standby process management unit 203C terminates a standby process 203A before activating a takeover process 203D used for taking over processing of the active system process 103A when a takeover of the active system process is requested on the standby system device 200, the standby process 203A referring to the active side process information and acquiring resources in such a way that usage of resources of the standby process 203A is equal to or greater than the usage of resources of the active system process 103A.

Abstract: Systems and methods of managing published content of a shared storage medium can include rendering client-side script of published content at a client device. When rendering the client-side script, information from which a partition name can be computed can be transmitted to a server. The server can compute the partition name and identify a partition of the shared storage medium corresponding to the partition name. If a partition corresponds to the partition name, the server transmits data stored in that partition to the client device. If a partition does not correspond to the partition name, the server creates the partition. The server can also create message queue associated with the partition and the client device to place messages corresponding to updates to the partition. In response to a data update operation of the client-side script, the server transmits the updates in the message queue to the client device.

Abstract: A multiprocessor computer system comprises a first node operable to access memory local to a remote node by receiving a virtual memory address from a requesting entity in node logic in the first node. The first node creates a network address from the virtual address received in the node logic, where the network address is in a larger address space than the virtual memory address, and sends a fast memory access request from the first node to a network node identified in the network address.

Abstract: A monitoring server receives the latest monitored data and corresponding monitoring time from monitoring devices connected to the server at a specified time interval. The monitoring server records monitored data of each monitoring item and the corresponding monitoring time to a pointed node of a device data list, and adds the monitored data and the corresponding monitoring time, which are recorded in the pointed node of the device data list, into a monitored data list. When a web server requests real-time monitored data, corresponding monitored data is read from the device data list and sent to the web server. When the web server requests historical monitored data of an designated period, corresponding monitored data of the designated period is read from the monitored data list and sent to the web server.

Abstract: A system for accessing digital content includes a server storing the digital content and a client device. The server includes a first broadcast network interface communicating with a broadcast network and a first unicast network interface communicating with a unicast network. The client device includes a user interface accessing the digital content based on user preferences and allowing a user to generate a request to receive a selected portion of the digital content. The client device includes a second broadcast network interface communicating with the broadcast network and a second unicast network interface transmitting the request for the selected portion of the digital content via the unicast network. The server receives the request via the unicast network and transmits the selected portion of the digital content via the broadcast network and the unicast network based on a characteristic of the selected portion of the digital content.

Abstract: A system for a mass centralization approach to full image cloning of multiple computing devices is provided. The system includes a server, and a computing device that includes a disk for data storage, wherein the disk includes a plurality of blocks within a plurality of regions. The system also includes a processor programmed to map each file stored on the disk to at least one of the plurality of blocks, for one or more of the plurality of regions of the disk, determine that a number of files appearing in sequential blocks exceeds a predefined threshold number of files, perform a continuous scan of the one or more of the plurality of regions of the disk occupied by the number of files appearing in sequential blocks exceeding the predefined threshold number of files, and send a copy of the files scanned from the one or more plurality of regions of the disk to the server.

Abstract: A method, system, and computer program product for tokenized domain name resolution are provided. The method includes receiving a tokenized domain name, where the tokenized domain name includes a domain name with one or more embedded tokens. The method also includes parsing the tokenized domain name to identify the one or more embedded tokens. The method further includes extracting the one or more embedded tokens from the tokenized domain name, and performing at least one predefined process in response to extracting the one or more embedded tokens. The method may also forward control to the domain name.

Abstract: A method begins by a dispersed storage (DS) processing module encoding data to produce slices and redundancy slices and selecting primary and redundancy storage and execution units. The method continues with the DS processing module assigning partial tasks to the primary storage and execution units and generating a unique key set for each of the primary storage and execution units. The method continues with the DS processing module encrypting each of the slices with a corresponding one of the unique key sets to produce encrypted slices and sending the encrypted slices and an indication of the assigned partial tasks to the primary storage and execution units for storage and execution of the assigned partial tasks on the encrypted slices. The method continues with the DS processing module sending the redundancy slices to the set of redundancy storage and execution units for storage therein.

Abstract: An example method for hybrid Fibre Channel (FC) storage with end-to-end storage provisioning and external connectivity in a storage area network (SAN) environment is provided and includes partitioning a SAN into an internal virtual storage area network (VSAN) for connectivity to an internal storage element located in a first portion of the SAN implemented in a unified computing system (UCS), where a second portion of the SAN is external to the UCS, partitioning the SAN into an external VSAN for connectivity to an external storage element located in the second portion of the SAN, and facilitating communication with the internal storage element over the internal VSAN and with the external storage element over the external VSAN. In one embodiment, border ports on a FI in FC switching mode are configured as N-ports for the external VSAN, and the external storage element is attached to the UCS through an N-port.

Abstract: A method for storing and retrieving data in a storage node of a data store and storage node of a data store, storing in main-memory at least one segment of a relational table. The storage node includes at least one computational core running at least one scan thread each dedicated to the scanning of one of the at least one segment. At least one scan thread uniquely, continuously and exhaustively scans the dedicated segment of the relational table. The storage node receives and processes batches of query and update operations for the at least one segment of the relational table. The query and update operations of a batch are re-indexed at beginning of each scan by the scan thread. Then, the indexed query and update operations of a batch are independently joined to data records of said segment that match with predicates of the indexed query and update operations.

Abstract: A method of logging internet requests includes defining a plurality of field types of interest and receiving a request from the internet including one or more fields. The method also includes determining that a first field type of a first field of the one or more fields matches one of the plurality of field types of interest and caching at least a portion of the first field in a cache. The method further includes determining that a second field type of a second field of the one or more fields matches one of the plurality of field types of interest caching at least a portion of the second field in the cache. The method includes transmitting the cache to a server, determining, a number of occurrences of a field value of at least one of the first field type or the second field type, and providing a report including the number of occurrences of the field value.

Abstract: An apparatus, system, and computer readable medium are disclosed for booting a server from a shared storage system. The present invention teaches at least one server having at least one processor, a storage system having a plurality of storage drives and at least one boot volume corresponding to the at least one server, and a switch fabric having at least one switch; the switch fabric isolates boot traffic form storage traffic and enables communication between the server and the boot volume of the storage system. In some embodiments the switch fabric includes one or more partitionable switches that isolate boot traffic from storage traffic. The boot volumes may be a redundant array of storage devices. In certain embodiments, the present invention also includes devices external to the server, switch fabric, and storage system.

Abstract: A method, system and program product for enabling migration of Virtual Machines with concurrent access to data across two geographically disperse sites to enable load balancing across the two geographically disperse sites, by presenting over a network a read writable logical volume at a first site, presenting over a network a read writable logical volume at a second geographically disparate site; wherein the first volume and the second volume are configured to contain the same information, and enabling read write access to the volume at the first site or the volume at the second site for a first virtual machine while keeping the data consistent between the two sites to enable transparent migration of the virtual machine to load balancing across the two sites according to at least one load balancing metric.

Abstract: An embodiment generally relates to a method of updating clients from a server. The method includes maintaining a master copy of a software on a server and capturing changes to the master copy of the software on an update disk image, where the changes are contained in at least one chunk. The method also includes merging the update disk image with one of two client disk images of the client copy of the software.

Abstract: Described embodiments provide systems and methods for building client server applications. The application server code is deployed within a distributed datastore and utilizes the datastore's data locality information to fulfill requests with minimal remote procedure calls (RPC), reduced transfer of data between servers, and shared data caches. The application server inherits the properties of the distributed datastore such as statefulness, replication and failover. Described embodiments also enable the fetching and processing of data in a “big data” environment—a system that contains multiple servers' worth of data, with improved time and bandwidth considerations.

Abstract: A method for the operation of network management systems, according to which values of attributes relating to an element are presented to a first manager and values of attributes relating to an element, which correspond to the values of the first manager, are presented to a second manager. The first and second manager determine the same identification information according to the same rule and using at least some of the values as well as store said identification information independently from a modification of the values of attributes relating to the respective element. The identification information is used during communication between the first manager and the second manager for identifying the element.

Abstract: A system for automated management of virtual resources in a cloud computing environment includes a host computing device communication component and a storage system communication component. The storage system communication component is executed by a storage delivery management service, communicates with a storage system adapter in a storage area network to identify a storage system in a storage area network, and directs the automated provisioning of a virtual storage resource on the identified storage system, the storage system providing resources for provisioning the virtual drive. The host computing device communication component receives a request for access by a host computing device to the virtual storage resource, and responds, to the host computing device, with an identification of a network port of the identified storage system and an identification of the provisioned virtual storage resource.

Abstract: Embodiments provide systems, methods, and computer program products for inferring the switch port connectivity of discovered but unmanaged devices in a network without direct access to the devices. Embodiments operate by generating a physical address-to-port map based on collected operational data and then pruning the generated map based on switch port connectivity information and/or inferred link connectivity information. The switch port connectivity of discovered unmanaged devices is then generated or updated based on the pruned map. The switch port connectivity information can be used by various other tools to enable diagramming, asset inventory, and network planning, design, and optimization workflows.

Abstract: A system that incorporates teachings of the present disclosure may include, for example, a media distribution system having a controller to identify a plurality of media presentation devices of a user of the media distribution system, identify one or more distribution preferences supplied by the user for distributing media content to the plurality of media presentation devices, receive media content from one of a plurality of media sources of the user, determine a media content type from the received media content, and distribute the received media content to one or more of the plurality of media presentation devices according to the one or more distribution preferences and the media content type. The one or more distribution preferences comprise in part media content distribution arrangements assigned by the user between the plurality of media sources of the user and the plurality of media presentation devices of the user. Other embodiments are disclosed.

Abstract: An information processing system includes a first storage unit configured to store first divided data indicating divided time-series data, a second storage unit configured to store second divided data indicating divided time-series data divided at a time that is different from a time at which the first divided data is divided, and an processor that executes a procedure including, when a reproduction time is designated for the time-series data, reading and outputting divided data divided at a time just before the reproduction time from among the first divided data and the second divided data stored in the first storage unit and the second storage unit.

Abstract: One or more techniques and/or systems are disclosed for providing resource authorization to users of a distributed memory store (e.g., a distributed web-based cloud service). A session ID that identifies a location of an authorization document in a distributed memory store is used to access the authorization document, which comprises a global section with a principal ID related to a user. The user can be authorized to utilize a resource (e.g., in a distributed cloud service) if a resource section is present for the principal ID in the authorization document, and has appropriate resource data for the resource. If the resource section is not present, it can be created in the authorization document, and identified by a resource identifier. Authorization data can be loaded into the newly created resource section, and the authorization document, with the global and resource sections, is saved to a local cache for the distributed memory store.

Abstract: Methods and structure are provided for implementing security features in SCSI Enclosure Services (SES) systems. The system comprises an SES device server, which includes a frontend interface, control unit, and backend interface. The frontend interface is operable to receive SES commands generated by Small Computer System Interface (SCSI) devices, and the backend interface is operable to manage operations of at least one peripheral device communicatively coupled with the SES device server based on received SES commands. The control unit is operable to determine whether a SCSI initiator that generated an SES command is an authorized device. The control unit is further operable to perform the SES command in response to determining that the SCSI initiator is an authorized device, and is further operable to reject the SES command in response to determining that the SCSI initiator is not an authorized device.