Abstract: A secure boot system and method to reduce a total time to boot by performing secure boot validation at shutdown and storing an authentication code in a secure manner, in effect, pre-authenticating an application so that, at the next boot, authentication may be bypassed.

Abstract: A method is provided for automatically creating data relating to an automation system, wherein a plurality of software agents is assigned to the automation system. The software agents are connected to the cloud via a gateway, wherein the cloud holds an agent configuration for each software agent. Data captured by at least some of the software agents and relate to at least one device, service, and/or data source of the automation system, which may be reached by the particular software agent, are received by the gateway. At least one software agent assigned to the automation system is configured by the gateway during processing of one or more agent configurations from the cloud and the captured data relating to at least one device, service, and/or data source may be reached by the particular software agent.

Abstract: In accordance with some embodiments, an apparatus that controls device re-configuration for security is provided. The apparatus includes a storage storing a first firmware image for a re-configurable data communication device. In some embodiments, the first firmware image provides one or more operating parameter configurations for the re-configurable data communication device. The apparatus also includes a controller, which is coupled to the storage and the re-configurable data communication device and operable to manage transport of data by the re-configurable data communication device, including obtaining the first firmware image from the storage and loading the first firmware image to the re-configurable data communication device. The apparatus additionally includes a housing at least partially supporting the storage and the controller.

Abstract: A request to provide an application at a secure enclave of a server may be received. A hash value of the application may be generated. Application data that is to be used with the application at the secure enclave of the server may be identified. Another hash value of the application data that is to be used with the application at the secure enclave of the server may be generated. The hash value of the application and the other hash value of the application data may be signed where the signed hash value and other hash are being used to execute the application with the application data at the secure enclave of the server.

Abstract: In one or more embodiments, one or more systems, one or more methods, and/or one or more methods may: register a subroutine configured to store multiple addresses of a volatile memory medium VMM of an information handling system (IHS); for each IHS initialization executable/OS executable pair of multiple IHS initialization executable/OS executable pairs: retrieve, from a first non-volatile memory medium (NVMM), an IHS initialization executable of the IHS initialization executable/OS executable pair; copy, by the IHS initialization executable, an OS executable of the IHS initialization executable/OS executable pair from the first NVMM to the VMM; call, by the IHS initialization executable, the subroutine; store, by the subroutine, an address associated with the OS executable via a data structure stored by the VMM; and copy, by a first OS executable, the OS executable from the VMM to a second NVMM based at least on the address associated with the OS executable.

Abstract: Storage system comprises a cluster of storage controllers communicatively coupled to a storage device. Each storage controller is associated with a storage namespace in the storage device to process I/O operations of associated storage namespace. An I/O processing engine allocates I/O queues to each storage controller from the cluster of storage controllers for processing I/O operations of the associated storage namespace. The I/O processing engine is to identify a heated controller from the cluster of storage controllers based on temperature data corresponding to the cluster of storage controllers and suspend I/O queues handled by the heated controller. The I/O processing engine is to select a substitute controller based on the temperature data, associate the substitute controller with the storage namespace of the heated controller and allocate additional I/O queues to the substitute controller for processing the I/O operations for the storage namespace.

Abstract: Systems and methods for discovering and provisioning computing devices within a computing environment. An example method may comprise: loading a first kernel from a removable storage, wherein the first kernel identifies device information of the computing device when executed; transmitting a provisioning request comprising the device information to a provisioning device over a network; receiving provisioning data and a second kernel over a network, the second kernel comprising an operating system installer; and overwriting the first kernel with the second kernel.

Abstract: Embodiments of the invention provide systems and methods for managing processing, memory, storage, network, and cloud computing to significantly improve the efficiency and performance of processing nodes. More specifically, embodiments of the present invention are directed to a hardware-based processing node of an object memory fabric.

Abstract: A method and system including an Application Programming Interface (API) proxy module; an API proxy processor in communication with the API proxy module and operative to execute processor-executable process steps to cause the system to: receive API development data, wherein the API data includes at least one of back-end data and use-case data; identify one or more API clusters that is similar to the received API development data; generate an API proxy template based on the identified one or more API clusters; and display the generated API proxy template to a client on a user interface. Numerous other aspects are provided.

Abstract: Examples described relate to associating virtual network interfaces with a virtual machine during provisioning in a cloud system. In an example, during booting of a virtual machine in a cloud system, a number of network interfaces associated with the virtual machine may be determined. A further determination may be made whether the number of network interfaces associated with the virtual machine is less than a number of network interfaces specified for the virtual machine to perform a function. In response to a determination that the number of network interfaces associated with the virtual machine is less than the number of network interfaces specified for the virtual machine to perform the function, an internal virtual network kernel interface may be created. The internal virtual network kernel interface may be associated with the virtual machine. The virtual machine may be provisioned in the cloud system.

Abstract: Apparatuses, methods and storage medium for providing access from outside a multicore processor System on Chip (SoC) are disclosed herein. In embodiments, an SoC may include a memory to store a plurality of embedded values correspondingly associated with a plurality of architecturally identical cores. Each embedded value may indicate a default voltage for a respective one of the plurality of architecturally identical cores. In embodiments, an apparatus may include one or more processors, devices, and/or circuitry to provide access from outside the multicore processor SoC to individually configure voltages of the plurality of architecturally identical cores to values that are different than the values of the default voltages. Other embodiments may be described and/or claimed.

Abstract: Quality of service monitoring method, device and system are provided. The method includes receiving a data packet of a service. The data packet is generated during a service interaction between a first device and at least one second device. The method also includes determining a service type of the data packet based on an application layer message and/or a transmission layer message of the data packet. The method also includes determining a quality of service indicator according to the service type, and acquiring analysis data in the data packet according to the quality of service indicator. The method also includes determining the quality of service of the service based on the analysis data.

Abstract: A memory system and an operating method thereof include: at least a CPU configured to generate a special command; at least a PCIe link coupled with the CPU, wherein the PCIe link includes at least a PCIe switch; and a plurality of memory devices connected with the PCIe switch, wherein each of the plurality of memory devices includes a memory controller, an operational mode switch, and a plurality of memory components, and the operational mode switch is configured to perform a loopback from the memory controller corresponding to the special command at loopback operational mode.

Abstract: A BIOS platform configuration system includes a BIOS coupled to hardware subsystems. During initialization operations, the BIOS communicates with each of the hardware subsystems and retrieves respective hardware subsystem information that is associated with each of the hardware subsystems and that describes at least a portion of a communication route between that hardware subsystem and at least one other hardware subsystem. The BIOS then combines the respective hardware subsystem information that is associated with each of the hardware subsystems to generate configuration information that describes complete communication routes between each of the hardware subsystems, and configures at least one of the hardware subsystems using the configuration information.

Abstract: Methods, devices, and kits are provided for determining a compatibility of one or more devices in an analyte monitoring system.

Abstract: A method of loading an executable image for a computing system includes identifying segments of at least one executable image available for loading into memory of the computing system. Each segment is associated with one or more configuration features for the computing system. At least a first segment of the at least one executable image to load into the memory of the computing system is determined, based on the first segment satisfying one or more conditions associated with the computing system. The first segment of the executable image is loaded into the memory of the computing system. At least a second segment of the at least one executable image is made available for memory re-allocation, based on the second segment not satisfying the one or more conditions associated with the computing system. Various additional and alternative aspects are described herein.

Abstract: A plurality of module twins that respectively correspond to a plurality of modules of edge applications on a plurality of edge devices are stored. The plurality of module twins individually include metadata associated with the corresponding module of the plurality of modules. At least one further module to be deployed is determined. Edge devices of the plurality of edge devices to receive the determined at least one module are identified. The determined at least one further module is caused to be deployed to the identified edge devices. In response to deploying the determined at least one further module, the plurality of module twins is updated by adding, to the plurality of modules twins, modules twins corresponding to the deployed modules.

Abstract: A method for saving and/or restoring settings of an instrument for processing a sample or reagent is disclosed. The instrument comprises a control unit and an operating system. A storage medium is provided to the instrument. The storage medium comprises a script. The script restores data for restoring settings of the instrument. The script is encrypted and/or digitally signed. The method verifies an identity and/or integrity of the script and executes the script upon starting the instrument by the operating system with the storage medium when the identity and/or integrity of the script correspond to an identity and/or integrity of the instrument. The control unit provides an input menu for allowing a user to input a saving and/or restoring command. The instrument saves settings on the storage medium and/or restores settings of the instrument from the storage medium by the restoring data corresponding to the saving and/or restoring command.

Abstract: Disclosed are methods and systems that include receiving updated operating system information, encrypting the updated operating system information, and updating a map file. The updated operating system information is received at an encryption virtual machine. The encrypting the updated operating system information results in the encrypted updated operating system information. The encrypting the updated operating system information is managed by the encryption virtual machine. The updated operating system information is encrypted in response to receipt of the updated operating system information. The updated operating system information is encrypted using an encryption key.

Abstract: Examples associated with boot authentication are described. One example includes initiating a power on self-test (POST) phase of a boot of a system. Prior to initiating a driver execution environment phase of the POST phase, a network stack may be loaded for a network port. An encrypted key may be retrieved from a trusted component of the system. Boot of the system may be permitted to proceed upon establishing a connection with an authentication server, and authenticating the system to the authentication server based on the encrypted key.

Abstract: A method for the initial programming of a secondary computer. The method includes configuring a serial interprocessor interface between the secondary computer and a main computer, and data are written via the interface to a flash memory of the secondary computer.

Abstract: Disclosed are systems and methods for securing a network including one or more network nodes connecting a plurality of network connected devices of the network. A method may include: receiving and temporarily storing a plurality of data packets in a shared buffer of a network node; receiving requests from a first processing engine and a second processing engine to access a temporarily stored data packet; generating a first pointer and a second pointer to the temporarily stored data packet, the second pointer being different from the first pointer while pointing to the same temporarily stored data packet; and enabling the first processing engine to use the generated first pointer to access the temporarily stored data packet and the second processing engine to use the generated second pointer to access the temporarily stored data packet.

Abstract: A remote I/O system includes an information network control module, I/O interface modules, and a remote I/O module. The information network control module includes a common memory and a second control IC. The second control IC includes a variation detecting circuit that includes a data latch buffer that stores read data from an information network; and a variation detection memory that stores data previously read from the information network. The variation detecting circuit compares data stored in the data latch buffer with data stored in the variation detection memory, to detect a variation in the data. The second control IC transmits, to the I/O interface module, by cyclic scan transmission, data from one of the scan memory areas corresponding to the data having the variation detected by the variation detecting circuit.

Abstract: A building management system includes a plurality of devices of building equipment configured to provide status data. The building management system also includes an equipment management server configured to assign and store parent-child relationships for the plurality of devices of building equipment. The equipment management server is also configured to monitor the status data to detect faults and generate a fault visualization interface. The fault visualization interface provides provide a list of the devices with detected faults, allows a user to select one or more of the devices from the list, and presents a parent-child relationship widget for the selected device. The parent-child relationship widget includes a list of parent devices for the selected device and a list of child devices for the selected device. Each device on the lists of parent devices and child devices has a status indicator indicating whether the device is in a fault condition.

Abstract: An apparatus includes a memory of a host computing device. The memory is to store at least one hypervisor. The apparatus also includes a processing device of the host computing device and operatively coupled to the memory. The processing device is to receive a request to connect the hypervisor to a virtual network, and to determine whether the hypervisor is connectable to the virtual network utilizing at least one connectivity check service. The at least one connectivity check service indicates whether one or more connectivity requirements are satisfied. The processing device is to further connect the hypervisor to the virtual network when the one or more connectivity requirements are indicated as being satisfied, and to perform a periodic connectivity check of the connection between the hypervisor and the virtual network.

Abstract: An authentication system includes a microcontroller having a unique identifier (ID) and a first key pair including a microcontroller secret key and a microcontroller public key. The microcontroller is configured to store the unique ID, the first key pair, a digital signature of the unique ID, the digital signature being generated using an external secret key of a second key pair, and a digital certificate of the microcontroller public key that is signed by the external secret key of the second key pair. The second key pair includes the external secret key and an external public key. The authentication system further includes a controller configured to perform a first authenticity validation check on the unique ID using the external public key and perform a second authenticity validation check on the microcontroller public key using the external public key.

Abstract: A computing resource service provider provides computing resources to customers, for example, computer system instances supported by server computer systems. These computer system instances may include logical volumes to support execution of the computer system instance. In addition, these instances may be terminated from time to time for various reasons. A stop signal transmitted to computing resource supporting a particular computer system instance may indicate that the particular computer system instance is to be terminated. In response to termination, the particular computer system instance may operate in accordance to a particular behavior.

Abstract: Examples associated with boot data validity are described. One example includes determining whether NVRAM boot data structure is valid. When the NVRAM boot data structure is valid, a NVRAM boot data structure validity flag is set to indicate the boot data structure is invalid. The validity flag is set to indicate the NVRAM boot data structure is valid once a point in a startup process is reached that indicates the startup process will complete successfully. When the NVRAM boot data structure is invalid, errors identified in the NVRAM boot data structure are repaired, and the startup process is restarted.

Abstract: Scanning a virtual disk image for malware without fully extracting the virtual disk image is described herein. An embodiment operates by receiving a selection of a virtual disk image. Virtual storage is initialized based on the virtual disk image. An appliance is launched, and the appliance is configured to access the virtual disk image via the virtual storage. The virtual disk image is scanned for malware using an anti-virus program such that the virtual disk image does not have to be fully extracted. During scanning, on-the-fly decompression, de-deduplication, decryption, and other operations are performed to translate read requests for content on the virtual disk image into raw disk data for the antivirus program.

Abstract: Identifying a trace based on wait chain coverage analysis comprises identifying a scenario covered by a plurality of traces, as well as a plurality of scenario phases. Each phase has corresponding phase beginning and ending, and is covered by corresponding trace(s) of the plurality of traces. For each prior instance of each phase, a corresponding wait chain comprising a series of wait operations is identified. After identifying signatures configured to match a subset of wait operations in wait chain(s), at least a signature coverage is calculated over the identified corresponding wait chains. The signature coverage characterizes portions(s) of these wait chains that are matched by the signature(s). Based on calculating the signature coverage, one or more of the plurality of traces are identified as having unknown wait states, based on the identified trace(s) corresponding to a larger amount of uncovered wait chain portions than others of the plurality of traces.

Abstract: Methods, apparatus, and articles of manufacture providing an efficient safety mechanism for signal processing hardware are disclosed. An example apparatus includes an input interface to receive an input signal; a hardware accelerator to process the input signal, the hardware accelerator including: unprotected memory to store non-critical data corresponding to the input signal; and protected memory to store critical data corresponding to the input signal; and an output interface to transmit the processed input signal.

Abstract: A natural language processing system includes logic circuitry that receives, from a first user channel, a user query including natural language (NL) input in a colloquial format from an end user, selects a first NLP application from a plurality of NLP applications, transforms, using the first NLP application, the NL input into a plurality of language tokens, extracts a command trigger from the language tokens, determines that the command trigger is linked to a command executable by a first wagering game channel, transmits a command query incorporating the command to the first wagering game channel, receives a command reply including wagering game data associated with the command from the first wagering game channel, generates, using the first NLP application, an NL response that includes the wagering game data and is structured in a colloquial format, and transmits the NL response to the end user via the first user channel.

Abstract: A system for configuring a processor is disclosed that includes a processor, a memory, and a firmware startup algorithm stored in the memory at a first predetermined location, the firmware start-up algorithm has one or more user-configurable driver algorithm memory storage locations. A driver algorithm stored at one of the user-configurable driver algorithm memory storage locations is configured to modify an operating system memory storage location for use by the firmware startup algorithm.

Abstract: In some examples, a system receives an update image including a first device driver to execute in a pre-operating system (pre-OS) environment of the system, and detects a second device driver that is already in the system. The system accesses a pre-stored dynamically configurable policy in the system, the pre-stored dynamically configurable policy relating to selection from among device drivers in the pre-OS environment, and determines, based on the pre-stored dynamically configurable policy, an action to take in response to the update image.

Abstract: This disclosure describes a programmable clock configuration block disposed at the SoC system, which manages clock frequency change flow in a single clock domain on a SoC system to provide dynamic clock frequency configuration while the SoC system is in operation. The programmable clock configuration block is configured to interact with the CPU of the SoC system to configure or change parameters relating to the clock signal frequency while the CPU is in an inactive state.

Abstract: Systems, methods, and computer-readable storage media are provided for parallel initiating of devices in a system. The method includes generating an affinity table that stores option ROM execution data including first data associated with a first device and second data associated with a second device and triggering, based on the affinity table, a first initialization of the first device and executing a first option ROM code during a pre-boot phase and triggering, based on the affinity table, a second initialization of the second device and executing a second option ROM code during the pre-boot phase. Triggering the first initialization of the first device and triggering the second initialization of the second device during the pre-boot phase is performed such that at least a part of the first initialization of the first device and at least part of the second initialization of the second device are executed in parallel.

Abstract: A process for deploying a mesh network includes setting a first node device (1x) in configuration mode; setting a second node device (1x+1) in configuration mode so that the second node device (1x+1) is configured; setting the second node device (1x+1) in deployment mode and moving it away from the first node device (1x) until the second node device (1x+1) activates a radio communication range limit indicator (7); and setting one of the node devices in service mode so that it is ready for data traffic. A simplified mesh network node device (1) for deploying a network uses only knobs and audio-visual indications of the device itself, thus without requiring the use of computers and additional external devices to configure each device.

Abstract: Task implementation tools are registered to interface with a change management tool. The change management tool configures a plurality of tasks to implement a change to an information technology infrastructure's configuration, and sends a plurality of task instructions to the plurality of task implementation tools for performing the plurality of tasks. Each task instruction is directed to a targeted task implementation tool for performing a particular task and includes task-related information for the targeted implementation tool to perform the particular task. Registering the plurality of task implementation tools to interface with the change management tool includes registering each the plurality of task implementation tools to accept the task instruction for the particular task directed to it from the change management tool, to know what to do with the task instruction and to know how to respond to the task instruction.

Abstract: Systems, related methods and other means for providing the securing of JavaScript and source code are provided herein. The system and methods may be configured to poll a client device and/or to otherwise determine whether a debugging console is active on a client device and deny access to the JavaScript and source code if the debugging console is active. Additionally or alternatively, the system and methods may receive a request to access the JavaScript and source code form a client device, and may determine whether the request is from a trusted referrer. When the request is from an untrusted referrer, the system and method can deny access to the JavaScript and source code. When the request is from a trusted referrer, the system and method can grant access to the JavaScript and source code.

Abstract: A baseboard management controller (BMC) of an information handling system may notify an operating system of the information handling system of receipt of a firmware update for a PCI component. The operating system of an information handling system may receive a notification from a BMC of the information handling system, via a basic input/output system (BIOS), of the information handling system that the BMC has received the firmware update. The operating system may halt traffic to the PCI component for which an update has been received, and the update may be applied to the component.

Abstract: Technologies are provided for generation of firmware configured to restrict use of a firmware tool. Some embodiments include a computing system that can obtain firmware source code comprising a module configured to copy contents of a digitally signed binary file to an advanced configuration and power management interface (ACPI) table at runtime of a firmware. The computing system can generate a firmware image of the firmware, the firmware image comprising the module, a first firmware globally unique identifier (GUID), and a defined area storing digital content that remains unchanged upon a change to the firmware. The computing system also can obtain a binary file comprising a second firmware GUID, a firmware tool GUID, and a feature GUID, and can digitally sign the binary file using a private encryption key to generate the digitally signed binary file. The computing system can store the digitally signed binary file within the defined area.

Abstract: A technique to secure a wireless communication link that is being shared among a wireless access point (AP), and each of a set of wireless clients (each a mobile station (STA)) that are coupled to the AP over the communication link. A typical implementation is a WPA2-PSK communication link. In this approach, and in lieu of a single secret key being shared by all AP-STA pairs, each AP-STA pair derives its own unique WLAN shared secret, preferably via a Diffie-Hellman (DH) key exchange. The WLAN shared secret is then used to generate WPA2-PSK keys, namely, pairwise master key (PMK) and pairwise transient key (PTK), that establish an 802.11 standards-compliant secure link.

Abstract: Embodiments described herein may relate to methods, systems, and/or instructions stored on non-transitory computer readable mediums for managing a boot personality of a network device. Managing a boot personality may include, while executing a first operating system on a network device in a first boot personality using a first processor, executing a command to modify a configuration of a hardware component of the network device to cause the network device to be configured in a second boot personality. The method may also include rebooting the network device; initializing, based on the configuration of the hardware component, a second processor before the first processor; and executing, after the initialization, a second operating system while the network device is in the second boot personality.

Abstract: A method is provided to generate a configuration descriptor for a chipset in a computing unit. The method includes determining, by one or more processors, a plurality of desired interface configurations for the chipset and for each of the one or more desired interface configurations, determining one or more ports of the chipset and corresponding platform connectors that satisfy features of the each of the one or more of the desired interface configurations based on a chipset description and a platform description. The method further includes assigning a port from among the determined one or more ports to the each of the one or more of the desired interface configurations and generating a chipset configuration descriptor based on the assigning of ports to each of the one or more desired interface configurations. In some embodiments, the chipset is initialized based on the configuration descriptor.

Abstract: Compatibility testing systems and methods are disclosed that provide scalable validation testing of systems and devices. In examples, systems and devices are identified to provide fundamental information about driver operations and driver extensions functionality. The identification allows systems and devices having particular similarities to be grouped in object groups. Compatibility tests are tagged as corresponding to the identifiable systems, devices, and/or object groups, compatibility testing system and methods map test sets specifically tailored to systems and devices as identified by their driver operations and driver extensions functionality. The tailored test sets include tests that ensure compatibility and through optimized test-to-device target mapping, an optimal set of testing set is discovered and scheduled to run. Strategically controlling the amount of testing distributed and executed increases compatibility testing speed and scalability.

Abstract: Method for updating a bootloader of a controller of a light, comprising at least one processor, at least one bootloader storage area, at least one application storage area, and a file storage area, a first bootloader file stored in a first bootloader storage area, said method comprising: transfer-ring to the controller a bootloader updating programme packet provided outside of the controller and which comprises or can generate a bootloader updating file which comprises either a complete up-to-date second bootloader file or programme parts supplementing the first bootloader file to form an up-to-date second bootloader file, storing the bootloader updating file in the file storage area of the controller, and, in the case of a sufficient minimum voltage being available to the controller, writing the first bootloader storage area with the bootloader updating file from the file storage area.

Abstract: Server management software providing functionality that eliminates proliferation of server profile templates due to small variations in server hardware types for newly configured systems is provided. The server management software allows a user to specify one or more hardware requirements or parameters for a server hardware template that applies the template across a broader range of hardware configurations rather than to one specific configuration.

Abstract: A system includes a management system, a managed system that is coupled to the management system through a network. The managed system comprises a managed device, a key identifier storage, a first managed device locking system coupled to the managed device and the key identifier storage, and a second managed device locking system coupled to the managed device, the key identifier storage, and the first managed device locking system. The first managed device locking system is configured to store a key identifier of the managed device in the key identifier storage and to provide access to a locking key of the managed device based upon the key identifier of the managed device, stored in a management system. The second managed device locking system is configured to monitor the managed device for an event that triggers unlocking the managed device, monitor operating status of the first managed device locking system.

Abstract: Methods, systems, and apparatus, including computer program products, for managing resources in virtualization systems, including multi-cloud systems. The use of supply chain economics alone and in combination with other techniques offers a unified platform to integrate, optimize or improve, and automate resource management in a virtualization system. These techniques may be used to monitor and control the delivery of service level agreements and software licenses. They may also be used to monitor and control contention of computing resources in a virtualization system, and to suspend or terminate computing resources.

Abstract: Power conservation logic for a storage node operates in parallel with an emergency shutdown process in which an emergency power source is engaged and data and metadata are destaged from volatile memory to non-volatile managed drives. The power conservation logic serially implements power conservation actions until enough reserve power is available to complete the emergency shutdown process. The power conservation logic may learn how much power savings are realized from each conservation action and adjust the order in which the conservation actions are serially implemented, e.g. in order from greatest to least power consumption reduction.