Abstract: Device group configurations can be managed across workspaces based on context. A service can be employed on each client computing device that a user may use in his or her workspaces. The service can be configured to determine when a profile applies to a workspace and can automatically apply a device group configuration to the workspace. The service can also monitor for context changes while a device group configuration is applied and can adjust the device group configuration based on the context changes.

Abstract: Database systems and related customization methods are provided. One exemplary method of modifying a database to support a new functionality involves receiving user input indicative of the new functionality from a client device coupled to a network, identifying existing customizations associated with a user of the client device in the database, determining a plurality of different solutions for implementing the new functionality based at least in part on the existing customizations associated with the user, providing a graphical user interface display at the client device including graphical indicia of the plurality of different solutions for implementing the new functionality, and in response to receiving indication of a selected solution of the plurality of different solutions from the client device, automatically instantiating a new customization corresponding to the selected solution in the database.

Abstract: Various systems and methods for testing devices, issuing certificates, and managing certified devices, are discussed herein. A system is configured for using platform certificates to verify compliance and compatibility of a device when onboarding the device into an internet of things (IoT) network. The system may use an approved product list to verify compliance and compatibility for the device. When the device is certified, the system may use an onboarding tool to onboard the device into the IoT network.

Abstract: A computer system enables users to create applications (such as web-based applications) easily by writing textual configuration files, which are automatically processed by the computer system to create a specific web-based application based on the configuration files. In particular, the computer system creates a data store layer, an application layer, and a user interface (UI) layer based on the configuration files. Users who do not have programming experience may write the configuration files. As a result, embodiments of the present invention enable non-programmers to create web-based applications easily and semi-automatically.

Abstract: Examples described herein include systems and methods for bare metal management of computing devices. Firmware of the computing device can be configured to contact a network location as part of an HTTP boot and download a boot agent. The boot agent can be prioritized to execute before a primary OS boot loader. The boot agent can download an OS configuration including a package that is inserted into the primary OS. The primary OS, as configured, can then boot. The boot agent can also attest to OS health and device compliance on subsequent boots. For example, the boot agent can cause the firmware to track how many boots have occurred since compliance verification. If a threshold number of boots occur without verification, the boot agent can initiate restoration. Alternatively, if a decommission flag is set, the boot agent can cause the computing device to boot into its original configuration.

Abstract: Techniques are presented herein for providing a persistent external Internet Protocol (IP) address for extra-cluster services. One example involves initiating, in a cluster, a first pod with a label that identifies a service. The first pod is configured to provide the service to one or more network entities outside the cluster. The first pod is assigned an IP address configured for communicating outside the cluster. A mapping of the service to the IP address is stored. In response to a determination that the service has been disrupted, a second pod is initiated in the cluster with the label that identifies the service. The second pod is configured to provide the service to the one or more network entities outside the cluster. Based on the mapping and the label that identifies the service, the IP address is assigned to the second pod.

Abstract: Example aspects include techniques for syncing configuration settings between incompatible operating systems. These techniques may include determining, via a first application, system-wide configuration information associated with a host system configuration parameter and a first configuration value of the host operating system, and transmitting a synchronization notification to a second application executing on a guest operating system, wherein the synchronization notification corresponding to the system-wide configuration information. In addition, the techniques may include configuring a guest system configuration parameter to a second configuration value based on the synchronization notification, and executing a third application on the guest operating system based on the second configuration value.

Abstract: Implementations of the present application propose a method and apparatus for preventing rollback of firmware of a data processing device, and a data processing device. The method includes: enabling a boot loader (BootLoader) to read a current value of a predetermined bit in a one-time programmable memory (eFuse); determining whether the current value and a legal value written into the one-time programmable memory after the latest updating of the firmware of the data processing device satisfy a preset relationship; in response to determining that the current value and the legal value satisfy the preset relationship, enabling the boot loader to call an operating system kernel of the data processing device, and in response to determining that the current value and the legal value do not satisfy the preset relationship, enabling the boot loader not to call the operating system kernel of the data processing device.

Abstract: Systems and methods to manage software vulnerabilities are described. The system retrieves a snapshot image of a production machine from a database. The snapshot image is associated with a recovery point identifier. The recovery point identifier identifies a first recovery point from multiple recovery points respectively corresponding to a plurality of snapshot images of the production machine. The snapshot image includes a first virtual machine that includes software information. The system processes the software information to identify first patch information associated with a first software module. Finally, the system pushes patch information to the production machine based on the processing of the software information.

Abstract: Embodiments of the present disclosure disclose a method and an apparatus for restoring a NETCONF server to factory defaults, and relate to the field of configuration management technologies. A NETCONF server receives a command for restoring to factory defaults sent by a NETCONF client, where the command for restoring to factory defaults is a remote procedure call (RPC) command that is based on a Yang model of the NETCONF for restoring the NETCONF server to the factory defaults. The NETCONF server replaces data in the running configuration datastore with factory defaults of the NETCONF server according to the command for restoring to factory defaults.

Abstract: Initializing a computing system using dormant pages includes marking a set of guest physical addresses as dormant. It further includes, for each node in a plurality of physical nodes, designating a set of real physical addresses for zeroing. An operating system is executing collectively across the physical nodes.

Abstract: A consent receipt management and data processing system may be configured to provide a centralized repository of consent receipt preferences for a plurality of data subjects. In various embodiments, the system is configured to provide an interface to the plurality of data subjects for modifying consent preferences and capture consent preference changes. The system may provide the ability to track the consent status of pending and confirmed consents. In other embodiments, the system may provide a centralized repository of consent receipts that a third-party system may reference when taking one or more actions related to a processing activity.

Abstract: A method may include receiving telemetry data from an information handling system communicatively coupled to the information handling system and store the telemetry data based on uniquely identifying information of the information handling system, generating a firmware recovery image for the information handling system based on the telemetry data, storing the recovery image in a recovery image database indexed by the uniquely identifying information, responsive to a condition for initiating firmware recovery of the information handling system, retrieving the firmware recovery image for the information handling system from the recovery image database, and communicating the firmware recovery image to a companion device associated with the information handling system, such that preboot firmware of the information handling system may load and execute the firmware recovery image from the companion device to restore the information handling system.

Abstract: Techniques in electronic systems, such as in systems including a processing chip and one or more external memory chips, provide improvements in one or more of system security, performance, cost, and efficiency. In some embodiments, the processing chip includes immutable hardware enabled to securely boot one or more CPUs of the processing chip to execute code stored encrypted in a non-volatile one of the memory chips. An encrypted update to the code is written to a portion of one of the memory chips and the immutable hardware copies the update to the non-volatile memory chip. The immutable hardware is then able to securely boot the one or more CPUs to execute the encrypted update stored in the non-volatile memory chip. In further embodiments, the non-volatile memory chip and/or the portion of one of the memory chips are not accessible by the one or more CPUs.

Abstract: In some examples, a storage medium stores information relating to reset ports associated with respective virtual machines (VMs) of a plurality of VMs. A controller detects, based on the information, an activation of a first reset port associated with a first VM of the plurality of VMs. In response to the detecting, the controller provides an indication of the activation of the first reset port to a hypervisor that is separate from the controller, the indication to cause the hypervisor to reset the first VM.

Abstract: Examples of the present disclosure describe systems and methods for selective export address table filtering. In aspects, when an executable program is loaded in an operating system's execution environment, an address table filtering (ATF) module is loaded into the address space of a target process associated with the executable program. The ATF module may iterate a list of system library files to identify exported function names. The relative virtual address (RVA) of the exported function names may be modified to point to a protected memory location. An exception handler may be registered to process exceptions relating to access violations of the protected memory location. If the exception handler determines that an access violation caused the detected exception, the instruction pointer of the exception may be compared to the expected system library addresses boundaries. If the instruction pointer address is outside the boundaries, remedial action may occur.

Abstract: Disclosed in some examples are memory devices which include electrically programmable elements that specify values for one or more firmware search parameters for use by the bootloader in locating and reading the firmware object. The values of the firmware search parameters may be dynamically selected at manufacturing time by modifying the configuration of the electrically programmable elements by applying or not applying a specified voltage to the electrically programmable elements. In some examples, an electrically programmable element may include: a fuse, an anti-fuse, and/or an e-fuse.

Abstract: A chemical release detection system includes a camera, an output control member, a mitigation member, and a controller in operative communication with the camera, the output control member, and the mitigation member. The camera is configured to detect a chemical release. The output control member is configured to generate commands. The mitigation member is configured to reduce risk generated by the chemical release based on the commands by the output control member. The controller is configured to notify a user of the chemical release, and provide an origin of the release and a direction of the release. The controller controls the operation of the output control member and the mitigation member.

Abstract: This application discloses a mobile device and method for managing installation of an application package (APK) in the mobile device. The device receives an installation request for installing the APK. The device retrieves a permission certificate for the APK according to the installation request. The permission certificate includes a cryptographic signature. The device determines validity of the permission certificate by verifying the cryptographic signature included in the permission certificate using a permission certification public key provided by a manufacturer of the device. The permission certification public key is stored in the device. The installation of the APK in the device is allowed when the permission certificate is determined to be valid. Using the method, the APK requires the device to grant specific high-risk permissions to the application upon installation.

Abstract: The present disclosure may include a processor that uses idle caches as a backing store for a boot code. The processor designates a boot core and an active cache from a plurality of cores and a plurality of caches. The processor configures remaining caches from the plurality of caches to act as a backing store memory. The processor modifies the active cache to convert cast outs to a system memory into lateral cast outs to the backing store memory. The processor copies a boot image to the backing store memory and executes the boot image by the boot core.

Abstract: A computer-implemented system and method of tracking telemetry data at a financial computing system is presented. The system and method includes receiving an electronic message that includes a payment transaction originating from a payment terminal, and associating a unique transaction identifier to the payment transaction. Telemetry data for the payment transaction is received from payment processing applications through a telemetry interface and aggregated into a data store. The aggregated telemetry data associated with the unique identifier is presented on a user interface by the financial computing system.

Abstract: In some examples, a system creates a virtual environment in a computing environment, the virtual environment having a configuration corresponding to a configuration of the computing environment. The system installs, in the virtual environment, a second version of a program while a first version of the program is running in the computing environment, the installing to update the program during a live operation of the computing environment in which the first version of the program is performing a workload.

Abstract: An electronic device includes: a processor; a first storage storing firmware to be executed by the processor when the electronic device is activated, and key code information defining a function of an operation button; a second storage reading the key code information and temporarily storing the key code information in a rewritable manner; and a keyboard controller assigning a key code to the operation button based on the key code information stored in the second storage. The processor determines whether the key code information stored in the second storage has been rewritten during setup of the firmware, and generates key code change information for changing a key code assigned to the operation button when the processor determines that the key code information has been rewritten. The keyboard controller changes a key code assigned to the operation button based on the key code change information during the setup of the firmware.

Abstract: Provided are computer program product, system, and method for managing data structures in a plurality of memory devices that are indicated to demote after initialization of the data structures. Indication is made to data structures to demote after initialization from a first level memory device to a second level memory device. The first level memory device has lower latency than the second level memory device. In response to completing initialization of the data structures in the first level memory device, the data structures indicated to demote after initialization are copied from the first level memory device to the second level memory device and removing the data structures indicate to move after initialization from the first level memory device.

Abstract: A method for a low voltage drive circuit (LVDC) begins by receiving data from one or more other low voltage drive circuits (LVDCs) using a bus with varying loading at one or more frequencies and continues by sampling one or more data values of the data to produce a sampled digital data value, converting the sampled digital data value to a binary string and writing the binary string to a buffer. The method continues by writing one or more additional binary strings to the buffer to form a digital word, outputting the digital word to a digital converter circuit and formatting the digital word to create a formatted digital word. The method continues by writing the formatted digital word to a second buffer, writing additional formatted digital words to the second buffer to form a data packet and finally, outputting the data packet to a host device.

Abstract: The invention comprises a mobile device with two circuit boards and certain shared resources, in order to provide the security of physically separate devices, yet do so in a single device using shared resources that do not affect security. Specifically, the invention has two boards connected via input/output switch, each having its own System-on-a-Chip (SoC), Memory (RAM), Storage and Radio Module (SIM(s)/Bluetooth/Wi-Fi), and may include one or more SIM cards. Touchscreen, battery, physical buttons and other peripherals are shared between boards. Each shared peripheral hardware module will be used by a single board only (the active in-use board being the “Foreground Board”); another board (the inactive “Background Board”) uses an emulated version of the same hardware module. At any moment, a user can switch between Boards and the Background Board becomes the active Foreground Board and vice versa.

Abstract: One embodiment includes data communication apparatus including a storage sub-system to be connected to storage devices, and processing circuitry to manage transfer of content with the storage devices over the storage sub-system responsively to content transfer requests, while pacing commencement of serving of respective ones of the content transfer requests responsively to availability of spare data capacity of the storage sub-system, find a malfunctioning storage device currently assigned a given data capacity of the storage sub-system and currently assigned to serve at least one content transfer request, and reallocate the given data capacity of the storage sub-system currently assigned to the malfunctioning storage device for use by at least another one of the storage devices while the at least one content transfer request assigned to be served by the malfunctioning storage device is still awaiting completion by the malfunctioning storage device.

Abstract: A processor-enabled method of deleting data of a user on an electronic device of the type having a processor, a volatile memory, a non-volatile memory, a display, and a user interface, includes the steps of A) providing a software application resident in the non-volatile memory of the electronic device, B) running the software application so that the software application is in a standby mode, and c) in an emergency situation, the user using the user interface to activate a data destruction routine of the software application. The data destruction routine performs the steps: 1) turning off the display of the electronic device, or alternately displaying all black pixels on the display, 2) overwriting the data of the user in the non-volatile memory with decoy data, and 3) initiating the factory-reset module. The decoy data may be all zeros, all ones, or random values, for example.

Abstract: A computer-implemented database system as described herein includes a memory device and one or more processors coupled with the memory device. The one or more processors are configurable to create and maintain a folder structure for a user interface (UI) environment, wherein the folder structure includes: a feature folder that defines an application feature supported by the UI environment, the application feature having a UI component associated therewith, and the UI component having a UI text string associated therewith; a component folder located in the feature folder, the component folder having computer readable files that define the UI component; and a text string file located in the component folder, wherein the text string file defines content of the UI text string.

Abstract: In a system with a master processor and slave processors, sync points are used in boot instructions. While executing the boot instructions, the slave processor determines whether the sync point is enabled. In response to determining the sync point is enabled, the slave processor pauses execution of the boot instructions, waits for commands from the master processor, receives commands from the master processor, executes the received commands until a release command is received, and then continues to execute boot instructions. In response to determining the sync point is not enabled, the slave processor continues to execute boot instructions.

Abstract: Techniques for coordinating the monitoring of output devices are provided. The output devices may be in an enterprise or corporate network. In one technique, for each of multiple mediation services executing on multiple computing devices, a list of multiple output devices is received over a computer network from each mediation service. A first list from a first mediation service identifies a particular output device. A second list from a second mediation service that is different than the first mediation service also identifies the particular output device. Based on the list from each mediation service, a mapping that maps each output device to a list of mediation services is generated. The mapping pertaining to the particular output device is transmitted over the computer network to the first and second mediation services.

Abstract: A machine may be configured to perform A/B testing on mobile applications. For example, the machine receives an identifier of a user from a mobile device that requests a layout description of a user interface, determines the layout description that provides a configuration of one or more elements of the user interface according to an experiment variant associated with an experiment, and causes display of the one or more elements of the user interface on the mobile device based on the layout description.

Abstract: Systems and methods for receiving a request to analyze trust of a client system and perform actions based on a client trust profile. A trust rating server device receives a request from a client computing device to analyze the trust on the device. The request identifies at least one credential or certificate installed on the device for example. The credential or certificate is obtained and analyzed to identify key information that relates to trust, such as level of encryption, country or entity of origin, duration of credential, certifying authority, etc. A rating is established using the key information and compared to a profile or other metric. One or more credentials or certifications may be blocked, disabled, enabled or removed based on a user's profile. Trust credentials are continuously monitored on the device for changes, and new credentials are blocked that do not meet thresholds established in the user's profile.

Abstract: A bus filter driver and security agent components configured to retrieve and analyze firmware images are described herein. The bus filter driver may attach to a bus device associated with a memory component and retrieve a firmware image of firmware stored on the memory component. The bus filter driver may also retrieve hardware metadata. A kernel-mode component of the security agent may then retrieve the firmware image and hardware metadata from the bus filter driver and provide the firmware image and hardware metadata to a user-mode component of the security agent for security analysis. The security agent components may then provide results of the analysis and/or the firmware image and hardware metadata to a remote security service to determine a security status for the firmware.

Abstract: An information handling system may include a processor and a basic input/output system (BIOS) comprising a program of instructions executable on the processor, the basic input/output system configured to, upon occurrence of a predetermined number of failures to complete a power-on/self-test (POST) of the information handling system: for each particular critical boot variable of the BIOS stored in a memory associated with the BIOS, read a backup variable for the particular critical boot variable, if available, and write a value of the backup variable as the critical boot variable; and attempt to reboot the information handling system with values of the backup variables used for the critical boot variables.

Abstract: A method including installing, by a VPN server on a volatile memory, an initial operating system to enable the VPN server to obtain a VPN operating system to enable the VPN server to provide VPN services; transmitting, by the VPN server based at least in part on installing the initial operating system, a request to an infrastructure device for the VPN operating system; receiving, by the VPN server based at least in part on transmitting the request, the VPN operating system from the infrastructure device; and installing, by the VPN server on the volatile memory, the VPN operating system to provide the VPN services. Various other aspects are contemplated.

Abstract: A system for configuring an information handling system into a minimum configuration mode. If an information handling system hangs, embodiments may communicate with a remote access controller to set a configuration flag corresponding to a minimum configuration mode. When the information handling system starts a POST process, the BIOS checks the configuration flag. If the flag is set, the BIOS initializes a single DIMM and bypasses any PCIe slot driver initializations and any non-essential services to allow the information handling system to complete the boot process. The information handling system may boot to a UEFI code to allow a user to diagnose a problem or boot to a BIOS setup code to allow the user to enable additional DIMMs, PCIe slots and turn on non-essential services.

Abstract: A data processing system for determining a capacity of a server farm implements determining a first operating parameter indicative of a utilization status of a server farm comprising a plurality of virtual machines; determining that the first operating parameter falls within a first range of operating values in which capacity testing of the server farm is performed; capacity testing the server farm to determine a capacity estimate by iteratively configuring a virtual machine of the plurality of virtual machines operating in an active state to operate in a sleep state until the first operating parameter reaches an upper threshold associated with the first range of operating values and monitoring performance of the plurality of virtual machines; modifying configuration parameters of the server farm to adjust an amount of available computing capacity based on the capacity estimate; and operating the server farm based on the updated configuration parameters.

Abstract: A method, an apparatus, a device and a computer readable storage medium for designing a dual-mirror shared conf partition file are provided. The method includes pre-configuring disk space occupation capacities for a first flash mirror file, a second flash mirror file, and a shared conf partition of the BMC, and generating a FW file of the BMC which does not include a shared conf partition file. The method further includes mounting partitions configured in one of the first and second flash mirror files firstly and then mounting the shared Conf partition at last, in response to an instruction for starting the one of the first and second flash mirror files. The shared conf partition stores a configuration file of the BMC. The shared conf partition and the configuration file are automatically generated when the BMC runs normally for the first time.

Abstract: A system and method for logging state data from a power system control device on a computer system is disclosed. The computer system includes a power system supplying power to the computer system. The power system has a power-up sequence having a plurality of stages. The power system control device is coupled to the power system. The power system control device includes a finite state machine circuit having states corresponding to the stages of the power-up sequence. The control device also has a write controller, a storage buffer, and a communication interface. The write controller writes the state of the finite state machine circuit in the storage buffer. An external controller is coupled to the communication interface and is operable to read the stored state data.

Abstract: A memory management system includes a cache invalidation logic configured to invalidate, based a cache invalidation event, cache entries within a cache memory by having each cache entry, of the cache entries within the cache memory, reference a respective dummy address from among dummy addresses within a dummy address space, wherein the cache memory is assigned to a memory, the memory has a memory address space associated therewith to provide access the memory, and each dummy address of the dummy addresses within the dummy address space is distinct from any address of the memory address space.

Abstract: Systems and methods are provided for supporting use of system BIOS components (e.g., such as BIOS debug messages, debugger firmware, UEFI drivers, etc.) that are stored separately from the remainder of system BIOS firmware for an information handling system. The system BIOS components may represent only a portion of the total BIOS firmware, and may be selectively retrieved and loaded from the separate storage into system memory when needed by the system BIOS for operating purposes (e.g., such as debugging operations).

Abstract: A data bus subscriber and a method for processing data, wherein the data bus subscriber can be connected to a local bus, particularly a ring bus, and the data bus subscriber has an input interface, which can be connected to the local bus, for receiving first local bus data, an output interface, which can be connected to the local bus, for transmitting second local bus data, a processing component for synchronous processing of the first local bus data and/or data stored in a memory and for output of at least one control signal, a logic unit, which is adapted in order to modify a quantity of received first local bus data based on the control signal in order to generate the second local bus data to be transmitted, wherein the logic unit is further adapted for synchronous, delayed transmitting of the second local bus data via the output interface.

Abstract: Techniques for optimizing CPU usage in a host system based on VM guest OS power and performance management are provided. In one embodiment, a hypervisor of the host system can capture information from a VM guest OS that pertains to a target power or performance state set by the guest OS for a vCPU of the VM. The hypervisor can then perform, based on the captured information, one or more actions that align usage of host CPU resources by the vCPU with the target power or performance state.

Abstract: Techniques and apparatus for remotely accessing debugging resources of a target system are described. A target system including physical compute resources, such as, processors and a chipset can be coupled to a controller remotely accessible over a network. The controller can be arranged to facilitate remote access to debug resources of the physical compute resources. The controller can be coupled to debug pin, such as, those of a debug port and arranged to assert control signals on the pins to access debug resources. The controller can also be arranged to exchange information elements with a remote debug host to include indication of debug operations and/or debug results.

Abstract: Provided are a computer program product, system, and method for maintaining data structures in a virtual memory comprised of a plurality of heterogeneous memory devices. Access counts are maintained for a plurality of data structures stored in a first level memory device. A determination is made of data structures in the first level memory device having lowest access counts. The determined data structures are deleted from the first level memory device and retaining copies of the data structures in a second level memory device, wherein the first level memory device has lower latency than the second level memory device.

Abstract: Power supply efficiency may be provided. First, a total power supply capacity may be determined comprising a sum of a plurality of supply capacities respectively corresponding to a plurality of power supplies serving a plurality of components. Next, a load value corresponding to the plurality of components may be determined. A number of the plurality of power supplies may then be powered down. The number of power supplies powered down may comprise a value that may cause a remaining number of the plurality of power supplies serving the plurality of components to operate within an efficiency range.

Abstract: The invention introduces a method for configuring a reliable command, performed by a flash controller, including: issuing an enabling signal to an output device, where the flash controller and the output device are disposed on a printed circuit board (PCB) and intercoupled through wires in the PCB; reading an opcode of the reliable command corresponding to a flash module from the output device, where the flash module is disposed on the PCB and coupled to the flash controller through circuits in the PCB, and the reliable command is used to direct the flash module for access to data in a single level cell (SLC) mode; and stopping issuing the enabling signal to the output device after obtaining the opcode of the reliable command.

Abstract: A system to facilitate a container orchestration cloud service platform is described. The system includes a controller to manage Kubernetes cluster life-cycle operations created by each of a plurality of providers. The controller includes one or more processors to execute a controller micro service to discover a provider plugin associated with each of the plurality of providers, and perform the cluster life-cycle operations at a container orchestration platform as a broker for each of a plurality of providers.

Abstract: Systems, apparatuses and methods may provide for technology that assumes, by a root of trust located in a trusted region of a system on chip (SOC), control over a reset of the SOC and conducting, by the root of trust, an authentication of an update package in response to an update condition. The root of trust technology may also apply the update package to firmware located in non-volatile memory (NVM) associated with a microcontroller of the SOC if the authentication is successful.