Abstract: Systems and methods for managing system protection settings with heterogeneous computing platforms are described. In an illustrative, non-limiting embodiment, an IHS may include a heterogeneous computing platform and a memory coupled to the heterogeneous computing platform, where the memory comprises a plurality of sets of firmware instructions, where each of the sets of firmware instructions, upon execution by a respective device among a plurality of devices of the heterogeneous computing platform, enables the respective device to provide a corresponding firmware service, and where at least one of the plurality of devices operates as an orchestrator configured to: receive context or telemetry data; and based, at least in part, upon the context or telemetry data, modify a setting of a feature selected from the group consisting of: Wake-on-Approach (WoA), and Walk away Lock (WaL).

Abstract: A system, method and computer program for a scanning service is presented. A scanning service compatible with a cloud storage system is configured to receive notifications from a cloud storage service about storage event activity and to access data in the cloud storage service. The scanning service receives a notification regarding storage activity related to a file in the data. After the completion of the storage activity, the scanning service receives the file from the cloud storage service and scans the file. When a determination is made based on the scan that at least a portion of the file should not be distributed then an action is taken with respect to the cloud storage service based on the determination that at least a portion of the file should not be distributed.

Abstract: An information handling system is configured to remotely monitor a managed resource that includes lifecycle management and/or control of basic input/output system settings and administrator password. The information handling system is also configured to provide software and/or firmware updates on the managed resource using a binary large object with an entitlement to the managed resource.

Abstract: Embodiments of this application provides an operating system upgrade method, a device, a storage medium. The method includes: running a first operating system; obtaining a first system upgrade installation package that includes first update data and a second system upgrade installation package that includes second update data; storing the first update data and the second update data in a user data partition; restarting an electronic device; loading data in a basic partition and a second static partition; loading first dynamic partition data to run a third operating system, where second dynamic partition data corresponds to a result of superposition of third dynamic partition data and the second update data, and the third dynamic partition data corresponds to a result of superposition of data in a dynamic partition and the first update data; and merging the first update data and the second update data into the dynamic partition.

Abstract: A settings information generation device, for reducing the number of settings steps pertaining to a device in a superordinate device that communicates with a slave device to which the device is connected, includes: a selection unit for accepting a selection of a device to be connected; an acquisition unit for acquiring operational settings information including the input/output data length of the selected device; and a generation unit for generating, on the basis of the operational settings information, superordinate device settings information for setting a storage region for storing data exchanged with the device by a controller via a device management unit.

Abstract: A system includes one or more data processors configured to run a basic input/output system (BIOS) service and a bootloader configuration manager for tuning kernel parameters. The system further includes a non-transitory computer-readable storage medium containing instructions which, when executed on the one or more data processors, cause the one or more data processors to perform operations. The operations include receiving administrative inputs and checking the administrative inputs against a checklist to determine whether any errors are introduced by the administrative inputs. The operations further include writing the administrative inputs to a temporal configuration file in response to no errors being introduced by the administrative inputs. The operations further include exporting the temporal configuration file to a designated output path. The exported temporal configuration file includes kernel parameter settings for configuring a bootloader of a computing device.

Abstract: Examples described herein a firmware update device to execute a second firmware, in place of execution of a first firmware, in response to an instruction that causes the firmware update device to execute the second firmware, wherein the second firmware is copied to a buffer prior to execution of the instruction. In some examples, one or more processors are to execute the instruction that causes the firmware update device to execute the second firmware. In some examples, prior to execution of the instruction, a device root of trust is also to validate the second firmware.

Abstract: An electronic apparatus including a memory, a communication interface, and a processor configured to store, in the memory, a first certificate including first certification information and a first electronic signature corresponding to the first certification information received from a first server based on an application data request, and store a second certificate including second certification information and a second electronic signature corresponding to the second certification information received from a second server. The processor obtains first hash data by decrypting the first electronic signature using a public key of the second server included in the second certification information, and second hash data by converting the first certification information. verifies the first server based on the first hash data and the second hash data, and controls, based on a the first server being verified, the communication interface to transmit a request signal for the application data to the first server.

Abstract: Examples described herein relate to a device configured to allocate memory resources for packets received by the network interface based on received configuration settings. In some examples, the device is a network interface. Received configuration settings can include one or more of: latency, memory bandwidth, timing of when the content is expected to be accessed, or encryption parameters. In some examples, memory resources include one or more of: a cache, a volatile memory device, a storage device, or persistent memory. In some examples, based on a configuration settings not being available, the network interface is to perform one or more of: dropping a received packet, store the received packet in a buffer that does not meet the configuration settings, or indicate an error. In some examples, configuration settings are conditional where the settings are applied if one or more conditions is met.

Abstract: An electronic circuit includes a data bus, a first module, and a second module. The first module is coupled to the data bus and corresponds to a first address. The first module performs a first function and includes a first storage location for first configuration data for the first function and first error checking data. The first module also includes a first local configuration checker having a first identification code. The first error checking data is based on the first configuration data and the first identification code. The second module is coupled to the data bus and corresponds to a second address. The second module performs a second function and includes a second storage location for second configuration data and second error checking data. The second module also includes a second local configuration checker having a second identification code that is distinct from the first identification code.

Abstract: An apparatus and method for providing efficient power management for data transfer protocols between components. A source generates requests and a destination services the requests. The source and destination support a communication protocol that includes both a transfer channel and one or more transaction channels for each type of request. The source and destination rely on a valid signal and a ready signal of the transfer channels to autonomously manage power consumption. The source and destination remove any dependencies on an external power manager and make it unnecessary to add signal extensions to the communication protocol to support power management.

Abstract: A self-healing video surveillance system is described. The self-healing video surveillance system includes one or more surveillance cameras that are configured to store configuration data of a network video recorder in operable communication with the surveillance cameras. The network video recorder includes configuration data, and a module configured to store the configuration data on the surveillance cameras and/or retrieve configuration data stored on the surveillance cameras. A new network video recorder introduced into the network retrieves the stored configuration data to self-configure with minimal or no human interaction. In embodiments, configuration data is distributed among a plurality of surveillance cameras, and may be stored in encrypted format.

Abstract: A set of two or more variable length data blocks is stored in memory. Each variable length data block has a maximum size of N*B, wherein N is an integer greater than or equal to two, and B is a maximum data size that can be written to the memory using a single memory access request. For each variable length data block of the set, the first P non-overlapping portions of size B of the variable length data block are stored in a chunk of the memory allocated to that variable length data block, wherein P is a minimum of (i) a number of non-overlapping portions of size B of the variable length data block and (ii) X which is an integer less than N. Any remaining portions of the variable length data blocks are stored in a remainder section of the memory shared between the variable length data blocks of the set. Information indicating the size of each of the variable length data blocks in the set is stored in a header.

Abstract: Techniques for secure boot up of unified extensible firmware interface (UEFI) compliant devices are described. In an example, execution of a driver associated with a hardware component of a computing device may be detected during booting of the computing device. Based on the detection, a first driver hash of a system table of the UEFI may be computed, where the system table is a data structure that stores configuration details of the computing device and UEFI services. Thereafter, a second driver hash of the system table may be computed based on detection of completion of the execution of the driver. The first driver hash and the second driver hash may then be compared to determine tampering with the system table of the UEFI.

Abstract: Disclosed are techniques for a power management integrated circuit (PMIC) to support a power-up sequence from a powered-down state to a powered-up state when both a main supply voltage and a backup supply voltage are present or when only the backup supply voltage is present. The PMIC may monitor the two supply voltages to identify the supply voltages that are present. The PMIC may be configured with a power-up initialization mode of operation through an EFUSE/MTP register, including a first bit to control power up of a voltage regulator of the PMIC with the main supply voltage or the backup supply voltage. Another bit may control power up of the voltage regulator with the backup supply voltage in the dual-supply or the single-supply configuration. The PMIC may execute one of four power-up sequences based on the monitored status of the supply voltages and the configured power-up initialization mode of operation.

Abstract: In general, embodiments of the invention relate to a method and system for managing a storage system. In many traditional implementations host bus adapter (HBA) manages the storage device, however frequently the HBA cannot implement the necessary methods to secure a self-encrypting drive (SED). One or more embodiments of the invention use a baseboard management controller (BMC) to manage the security of the SEDs as well as the security life cycle of the SEDs, while the HBA acts as a passthrough conduit between the SED and BMC.

Abstract: A secure boot monitoring and validation process for operating system (OS) initial installation or upgrade operations. A validated copy of OS boot files is made during OS installation. The boot files are stored in a first RAID array. A checksum comparator or OS boot file filesystem check (FSCK) component validates the boot files upon initial installation of the OS by comparison with a secure copy of the boot files, which are stored in a second RAID array. Any validation failure indicates corruption or unwanted modification of the boot file data, and an autorecovery operation using different boot partitions is attempted.

Abstract: Computing platforms and related methods for providing accessible user interfaces are disclosed. An example apparatus includes a display controller to a display controller to sample a region of a display frame associated with a location of a touch on a display screen of a user device and logic circuitry to, after a Basic Input Output System (BIOS) is operational in the user device and prior to loading of an operating system of the user device, identify content in the display region and cause at least one output device to generate an output representative of the content, the output including at least one of an audible output or a haptic output.

Abstract: Techniques for implementing an infrastructure orchestration service are described. A safety plan comprising a list of resources and operations based at least in part on a deployment configuration file can be received. Upon receiving approval of the safety plan, an operation corresponding to at least one of the list of resources can be prepared to be performed. The operation can be compared to the safety plan. If the operation is part of the safety plan, the operation can be performed. If the operation is not part of the safety plan, the deployment can be halted, and a notification that the deployment is not in compliance with the safety plan can be transmitted.

Abstract: Methods and apparatus for seamless SMM (System Management Mode) global driver update base on SMM Root-of-Trust. Mechanisms are provided to load and replace SMM drivers at runtime in a secure manner, without requiring an SMM firmware update and platform reset. SMM code is executed by BIOS during boot in a hidden area of memory called SMRAM space. Seamless update using an SMM Global Driver Update provides a method to load and replace all SMM drivers (including SMM infrastructure) on an already shipped platform production for purposes such as bug fixes. The principles and teachings may also be applied to update other types of secure execution mode code in addition to SMM code.

Abstract: One embodiment of a disclosed system, method, and computer readable storage medium which includes an algorithm for regulating power to electronic components of a device. In an active state, the system detects a period of inactivity based on a frequency of gesture inputs to the contact-sensitive surface of the device. In response to detecting the period of inactivity, the device transitions into an idle state with reduced power consumption by electronic components of the device. The device records an amount of time that the device has spent in the idle state transitions into a regularized suspend state where power consumption by electronic components of the device is reduced from the consumption in the idle state to detect one or more activation trigger conditions. In the regularized suspended state, the device presents a persistent display comprising a graphic generated in response to a most recent set of user inputs the device.

Abstract: During a computing system boot sequence, reference firmware provided by a computing system component supplies Advanced Configuration and Power Interface (ACPI) code that generates ACPI tables and definition blocks to a bootloader. During a boot sequence, the reference firmware receives an indication from the bootloader which components the reference firmware is to initialize. As part of component initialization performed by the reference firmware, the reference firmware populates hand-off data structures (e.g., hand-off blocks (HOBs)) with ACPI code (AML code) that, when executed by the bootloader, generates and populates ACPI tables (e.g., DSDT and SSDT tables) and definition blocks with information pertinent to the initialization and runtime management of computing system components. Component initialization and runtime configuration workarounds can be implemented in the bootloader incorporating reference firmware updates provided by the component vendor.

Abstract: A System on Chip (SoC) includes a first core coupled to an interconnect; a second core coupled to the interconnect; a memory coupled to the interconnect and including a plurality of evenly sized partitions; and storage circuitry configured to store memory configuration information. The memory configuration information defines a memory configuration and is configured to indicate a series of swappable segments for each core of the SoC by indicating, for each core, a first number of partitions of the memory assigned to each of a first swappable segment and a second swappable segment for the core, the first swappable segment designated as an active segment and the second swappable segment designated as a first backup segment, and an enable indicator to indicate whether or not to assign the first number of partitions to a third swappable segment designated as a second backup segment.

Abstract: An information handling system includes an embedded controller configured to transmit an error code to a pre-extensible firmware interface initialization module. A graphics font manager may generate a glyphs database during a boot process. If the error code is associated with a no power-on self-test, no video condition, then the pre-extensible firmware interface initialization module may retrieve information associated with the error code transmitted by the embedded controller, and locate the glyphs database generated by the graphics font manager from the non-volatile storage device.

Abstract: A configuration information sharing method, a terminal device, and a computer-readable storage medium are provided. The configuration information sharing method, performed by a first terminal device, includes: obtaining first configuration information, where the first configuration information includes at least one of system configuration information or application configuration information of the first terminal device; and sharing the first configuration information.

Abstract: An objective of the present invention is to simplify generation of a program for carrying out data collection performed by a PLC and reduce the burden on an operator. The invention comprises: a device information library (111) which stores program templates corresponding to various process relating to data collection and, for each target device from which data is to be collected, device parameters corresponding to said target device; and a program generation unit (117) which generates a data collection program using program templates and device parameters corresponding to an accepted target device.

Abstract: A method (100) for installing a software package (38) on at least one computer (18) in which the software package has a container-based architecture and including a set (32) of containers (34) includes: providing a user interface (UI) (28) via which a use specification (30) is received from a user; identifying a subset of the set of containers based at least in part on comparing the received use specification with descriptors of the containers of the set of containers; computing resource requirements for the containers of the subset; and displaying at least one of (i) a list (36) of the containers of the subset and (ii) the computing resource requirements for the containers of the subset.

Abstract: The exemplary embodiments may provide a drug delivery device that receives glucose level values for a user (e.g., a diabetic patient) and based on the glucose level values, determines when the user has consumed a meal. In some embodiments, the drug delivery device may calculate an appropriate bolus dose and automatically deliver the drug bolus to the user. In some embodiments, instead of detecting the meal, the user may announce the meal, such as by activating an element on the drug delivery device or on a management device for the drug delivery device. Responsive to the meal announcement, the drug delivery device may calculate the drug bolus dose and deliver the drug bolus. In conjunction with the delivery of the drug bolus, the drug delivery device may relax one or more safety constraints for a relaxation period following the drug bolus delivery so that additional basal drug may be delivered, if needed, under relaxed constraints.

Abstract: In some aspects, the disclosure is directed to methods and systems for providing an architecture for building high performance silicon components that support a rich set of networking and security features. In many implementations, the architecture splits network and security functions into two functional and logical blocks (which may physically be on the same die or integrated circuit in some implementations, or may be split on separate integrated circuits). The network functions may be executed via an integrated network interface card and accelerator subsystem with a high throughput execution pipeline. Security functions may be executed asynchronously from the network processing functions, in many implementations.

Abstract: A pipeline computing apparatus (110) comprises: a computing unit (120) configured as a pipeline; a node monitoring unit (161) that obtains a node processing time; a queue monitoring unit (162) that obtains an accumulated message amount; a priority variable calculating unit (163) that, on the basis of the node processing time and the accumulated message amount in a reception queue in a stage previous to the node, calculates a priority variable of the node; and a time allocating unit (164) that allocates operating time to each of nodes in accordance with the priority variable.

Abstract: The disclosed technology relates to solutions for improving a firmware update mechanism and in particular, for improving a firmware update mechanism of a power distribution board by utilizing different boot procedures. A process of the disclosed technology can include steps for receiving, at a microcontroller, a firmware update, wherein the firmware update is transmitted by a computer powered by a power distribution board associated with the microcontroller, initiating, by the microcontroller, a warm boot procedure using the firmware update, and marking the warm boot procedure as successful if a message received from the computer indicates that the firmware update is successful. In some aspects, the process can further include steps for determining a power reset of the computer, initiating, by the microcontroller, a cold boot procedure using the firmware update, and marking the firmware update as proven if the message from the computer indicates that the firmware update is successful.

Abstract: An application invocation implementation method includes initializing at least one first application in response to a startup instruction of an electronic device, and generating at least one invocation entry identification each corresponding to one of the at least one first application. The at least one first application is different from second applications running in an operating system of the electronic device. The method further includes mapping the at least one invocation entry identification to a screen of the electronic device for the screen to present the at least one invocation entry identification, and, in response to a selection invocation request for one invocation entry identification of the at least one invocation entry identification, accessing memory address of one first application of the at least one first application corresponding to the one invocation entry identification, and running the one first application.

Abstract: Systems, apparatuses and methods may provide for technology that identifies, during a first boot process, whether at least one task associated with at least one software program is set to occur in a single-threaded process or a multithreaded process, in response to the at least one task being set to occur in the multithreaded process, executing the at least one task in the multithreaded process during the first boot process, and in response to the at least one task being set to occur in the single-threaded process, executing the at least one task in the single-threaded process during the first boot process.

Abstract: A data storage device comprises a first memory, a second memory, and a controller. The first memory has a faster access time than the second memory. The controller is configured to store host-initialization code in the first memory, store a copy of the host-initialization code in the second memory, determine that the copy of the host-initialization code should be designated as the main version of the host-initialization code, and relocate the copy of the host-initialization code to the first memory, which makes the copy of the host-initialization code the main version of the host-initialization code that is accessed to boot-up the host. Other embodiments are possible, and each of the embodiments can be used alone or together in combination.

Abstract: A virtual BIOS engine may be configured to, during runtime of an operating system, in response to an operating system event for updating firmware, load onto an isolated compute domain of the processor to emulate firmware update processes of a non-transitory computer-readable media with a virtual non-transitory computer-readable media and emulate the firmware update processes of the cryptoprocessor with a virtual cryptoprocessor, extract a firmware payload to the virtual non-transitory computer-readable media, and execute a virtual trust chain to measure the firmware payload in the virtual non-transitory computer-readable media.

Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include first and second Remote Access Controllers (RACs) that each includes computer-executable instructions to receive, by the first RAC, a firmware update image associated with the device in which the firmware update image conforms to a PLDM specification. The first RAC may then, issue a command to the firmware device indicating that the firmware device is to request a firmware update from the first RAC in which the command includes information about the second RAC. The information indicates the ability of the second RAC to complete a transfer of the firmware update image when the first RAC partially completes the transfer of the firmware update image.

Abstract: Systems and methods are provided for an automatically updated, self-reporting bill of materials. System components report important identifying information including firmware versions, software versions, and part numbers. In particular, when the system detects a change in a component, the bill of materials is updated. Additionally, a log of changes is saved.

Abstract: Embodiments of a device and method are disclosed. In an embodiment, a method of network device deployment involves receiving an installation job at a mobile application of an installer device, using the mobile application, scanning a code of a network device at a customer location to obtain network device information, and sending the network device information and location information of the network device at the customer location to a cloud server for location specific configuration of the network device.

Abstract: Systems for high-performance computing. A storage control architecture is implemented by a plurality of nodes, where a node comprises combinations of executable containers that execute in cooperation with virtual machines running above a hypervisor. The containers run in a virtual machine above a hypervisor, and/or can be integrated directly into the operating system of a host node. Sensitive information such as credit card information may be isolated from the containers in a separate virtual machine that is configured to be threat resistant, and which can be accessed through a threat resistant interface module. One of the virtual machines of the node may be a node-specific control virtual machine that is configured to operate as a dedicated storage controller for a node. One of the virtual machines of the node may be a node-specific container service machine that is configured to provide storage-related and other support to a hosted executable container.

Abstract: A memory controller includes a clock generator to generate a first clock signal and a timing circuit to generate a second clock signal from the first clock signal. The second clock signal times communications with any of a plurality of memory devices in respective ranks, including a first memory device in a first rank and a second memory device in a second rank. The timing circuit is configured to adjust a phase of the first clock signal, when the memory controller is communicating with the second memory device, based on calibration data associated with the second memory device and timing adjustment data associated with feedback from at least the first memory device.

Abstract: An information processing apparatus includes a processor configured to: acquire multiple pieces of circuit configuration information corresponding to multiple split circuits forming a processing circuit configured to execute a single processing function; and cause reconfiguration processes that reconfigure multiple partial reconfiguration regions into the multiple split circuits corresponding to the multiple pieces of acquired circuit configuration information to be executed in parallel.

Abstract: An industrial automation device includes processing circuitry and a non-transitory computer-readable medium having instructions that, when executed by the processing circuitry, cause the processing circuitry to execute a software container and receive, at the software container, a first set of data having raw data from one or more industrial automation devices communicatively coupled to the industrial automation device. When executed, the instructions also cause the processing circuitry to pre-process the first set of data using the software container to generate a second set of data and send the second set of data to a second industrial automation device communicatively coupled to the first industrial automation device.

Abstract: An implementation of a device disclosed herein includes a field programmable gate array (FPGA) circuit and a non-volatile memory (NVM) configured external to the FPGA circuit and configured to communicate with an in-system programming (ISP) manager configured on the FPGA circuit, wherein the NVM is further configured to store one or more system parameters and one or more firmware images, wherein the ISP manager being configured to detect an ISP mode in response to receiving a signal from an ISP switch and executing an ISP state machine to update one or more FPGA CPU control registers with one or more of the system parameters and the one or more of the firmware images stored on the NVM.

Abstract: A pluggable optical module configured to operate in a host device includes transmit optics; receive optics; an interface configured to connect to the host device, and communicatively coupled to the transmit optics and the receive optics; and circuitry communicatively coupled to the interface, wherein the circuitry is configured to, subsequent to insertion into the host device where the pluggable optical module initiates a boot process, provide an indication related to one or more of a status of the boot process and a time for the boot process to complete.

Abstract: An electronic device is provided. The electronic device includes a processor including a plurality of cores and a memory electrically connected with the processor and storing instructions.

Abstract: In some embodiments, an apparatus can include a host board that has multiple connectors. Each connector from the multiple connectors removably connects to a unique compute device from multiple compute devices. The apparatus can further include a memory that stores a first firmware. The apparatus can further include a controller that is operatively coupled to the multiple connectors and the memory. The controller provides access to the first firmware by a compute device from the multiple compute devices when the compute device removably connects to the host board via a connector from the multiple connectors and when a circuit of the compute device disables access to the memory of the compute device to cause the compute device to continue a power-on cycle using the first firmware.

Abstract: A software update device is configured to control software update of an electronic control unit mounted on a vehicle. The software update device includes: one or more storage devices configured to store first software and second software for downloading update data of the electronic control unit from a server, the first software and the second software being different from each other; and one or more processors configured to download the update data from the server by executing any of the first software and the second software.

Abstract: A storage unit is disclosed. The storage unit may include an interface to a host and storage for a data. A receiver may receive from a host a boot power data. The boot power data may including a first power level and a duration. A circuit may boot the storage unit based at least in part on the boot power data. The storage unit may include a second power level, with the first power level greater than the second power level.

Abstract: A static random-access memory (SRAM) includes a SRAM cell module, comprising a plurality of SRAM cell partitions, and an initialization register, containing data configured to control initialization of at least some of the plurality of partitions during an initialization phase. The SRAM also includes a control module coupled with the SRAM cell module and the initialization register, configured to read the initialization register during the initialization phase, and to selectively initialize a portion of the plurality of SRAM cell partitions, based at least in part on the data contained within the initialization register.

Abstract: Example aspects include techniques for syncing configuration settings between incompatible operating systems. These techniques may include determining, via a first application, system-wide configuration information associated with a host system configuration parameter and a first configuration value of the host operating system, and transmitting a synchronization notification to a second application executing on a guest operating system, wherein the synchronization notification corresponding to the system-wide configuration information. In addition, the techniques may include configuring a guest system configuration parameter to a second configuration value based on the synchronization notification, and executing a third application on the guest operating system based on the second configuration value.