Abstract: In a server system and a management method thereof, the management method includes generating at least one virtual device for transmitting option read-only memory (ROM) data that is necessary for using a target physical device of at least one physical device, allocating the at least one virtual device to at least one host to correspond to the at least one host, and transmitting the option ROM data to a host corresponding to the at least one virtual device. The switch device may comprise a peripheral component interconnect express (PCIe) switch device.

Abstract: Some implementations disclosed herein provide techniques and arrangements for transferring data between asynchronous clock domains. A synchronization signal may be generated by a first of the clock domains, and data may be transferred between the domains in response to the synchronization signal. Clock cycles of the second of the clock domains may be monitored in comparison to the synchronization signal to report the number of second clock domain cycles occurring per occurrence of the synchronization signal. This information may be recorded by testing and validation equipment to facilitate error analyses.

Abstract: A device including a NAND-flash memory comprising a read-only portion storing boot code and a key, and a system on a chip (SoC) coupled to the NAND-flash memory is provided. The SoC includes a read-only memory (ROM) storing one or more instructions and a processor configured to execute, upon startup, the one or more instructions stored in the ROM to request from the NAND-flash memory the boot code and the key. The processor further configured to load and execute the boot code to perform a chain of trust verification process on subsequent code during a booting process using the key. A method for using the device is also presented.

Abstract: Systems and methods for hardware hardened advanced threat protection are described. In some embodiments, an Information Handling System (IHS) may include a processor; and a Basic Input/Output System (BIOS) coupled to the processor, the BIOS having BIOS instructions stored thereon that, upon execution, cause the IHS to: launch an Extensible Firmware Interface (EFI) gateway module; and determine, using the EFI gateway module, whether the BIOS instructions include malware.

Abstract: A safety booting method for an embedded controller is applied in a laptop. The embedded controller is installed in the laptop, and the laptop includes a central processor unit (CPU). The safety booting method for the embedded controller includes steps of: connecting the embedded controller with a power; determining whether a safety verification for a booting read only memory (ROM) is passed or not; and initializing the power of the laptop by the embedded controller to normally provide the power to the laptop and boot the laptop when the safety verification for the booting ROM is passed.

Abstract: A method of limiting execution of a software application according to a pre-defined time-based rule comprises: whenever the software application is attempted to be launched, enforcing a pre-defined time-based rule (e.g. that is user-immutable) such that: i. whenever the software application is attempted to be launched during a first time interval, the execution of the software application is enabled; ii. whenever the software application is attempted to be launched during a second time interval immediately following the first time interval, the execution of the software application is limited; and iii. whenever the software application is attempted to be launched during a third time interval immediately following the second time interval, the execution of the software application is enabled.

Abstract: Techniques described and suggested herein include systems and methods for updating applications by reconfiguring an active original application to serve as a proxy for an active replacement application. An original application may be initialized in a way that allows updates to the original application to occur without adversely affecting the operation of the original application. A replacement application may be configured to connect to one or more communication endpoints via the active original application.

Abstract: A secure communication channel is established between a virtual trusted runtime basic input output system (BIOS) and a virtual machine that includes a virtual BIOS. The virtual trusted runtime BIOS communicates with the virtual machine according to a web-based protocol over the secure communication channel using a secure socket layer.

Abstract: In accordance with these and other embodiments of the present disclosure, an information handling system may include a processor and a basic input/output system (BIOS) including a program of instructions. The BIOS may be configured to, when read and executed by the processor, calculate a binding secret for binding a cryptoprocessor to a motherboard of the information handling system, the binding secret based on unique identifying information of both the cryptoprocessor and the motherboard, store the binding secret in a non-volatile memory integral to the cryptoprocessor, and validate binding of the cryptoprocessor to the motherboard by comparing a subsequently-calculated binding secret to the binding secret.

Abstract: Apparatuses, systems, methods, and computer program products are disclosed for transaction log acceleration. A log module is configured to determine transaction log records indicating a sequence of operations performed on data. A commit module is configured to send transaction log records to one or more volatile memory pages accessible over a network. Volatile memory pages are configured to ensure persistence of transaction log records. A storage module is configured to send transaction log records to a non-volatile storage device in response to an acknowledgment that one or more volatile memory pages store the transaction log records.

Abstract: To provide a magnetic element which can generate a skyrmion, and a skyrmion memory which applies the magnetic element or the like. To provide a magnetic element with a chiral magnet for generating a skyrmion, the chiral magnet is made of a magnetic material having a ?-Mn type crystal structure. Also, to provide a magnetic element with a chiral magnet for generating a skyrmion, the chiral magnet is made of a magnetic material having an Au4Al type crystal structure.

Abstract: A plurality of network cables are physically connected to a plurality of network ports on an appliance, wherein the appliance comprises a plurality of nodes each associated with a corresponding chassis slot position in which the node is located within a chassis of the appliance and each node having at least one management network port and one host network port. A network address is identified for each of the plurality of network ports. A first subset of network addresses is identified as being associated with a management network port and a second subset of network addresses is identified as being associated with a host network port based at least in part on a respective response received from each network address to a management request using a management interface protocol. For each management network port, a corresponding chassis slot position is associated with that management network port based at least in part on a response to a slot request using the management interface protocol.

Abstract: Aspects of the disclosure provide an electronic device that includes an exact match engine, a ternary content addressable memory (TCAM) engine, a search key generator and an output module. The exact match engine is configured to store a first set of entries. The TCAM engine is configured to store a second set of entries including at least some entries that are different from entries of the first set of entries. The search key generator is configured to generate a search key and provide the search key to the exact match engine and to the TCAM engine. The output module is configured to select one of a first output from the exact match engine and a second output from the TCAM engine in response to a signal that indicates whether the search key exactly matches one of the first set of entries.

Abstract: A system. The system includes a BIOS system comprising a first memory device configured to store data associated with a computer system, wherein the first memory device is a non-volatile random-access memory device. The system further includes a second non-volatile memory device configured to store a set of instructions for execution by a processor during initialization of the computer system. The set of instructions comprises at least one instruction configured to read a data value stored in the first memory device.

Abstract: A system according to one embodiment includes at least two socket servers each having a plurality of sockets, each socket being configured to receive a processor, and a plurality of adapters coupled to the serial computer expansion buses, the adapters being configured to enable communication between the processors of different ones of the socket servers. Each of the socket servers have at least one serial computer expansion bus coupled to each of the sockets thereof.

Abstract: A method and apparatus for updating the system configuration settings of a computer system. Embodiments include a remote system configuration system that enables a user to update the system configuration of a target machine from a server machine over a network or similar communications system. Another embodiment includes a system configuration method using a bus master device to write system configuration data into a target computer system.

Abstract: A computer system includes a memory storing an UEFI firmware and a processor. The UEFI firmware supports pre-boot initialization of automatic first-time pairing of Bluetooth devices to the computer system. The processor is operatively coupled to the memory and is used to execute the UEFI firmware, wherein the executing the UEFI firmware performs the steps of: initiating a pre-connection routine to discover a default device information list in the computer system; gathering target device information from the wireless device; filtering default device information list and target device information with a filter condition; determining a result device information if the target device information matches the default device information; and recording the result device information to memory.

Abstract: Apparatus and computer program products implement embodiments of the present invention that enable a computer system comprising networked computers to self-heal from a boot failure of one of the computers. In some embodiments, upon detecting a first computer having a memory and a physical boot device failing to successfully load a boot image, a second computer defines a virtual boot device in communication with the first computer and the second computer and having a boot image for the first computer. Subsequent to defining the virtual boot device, the second computer can configure the first computer to boot from the virtual boot device.

Abstract: A data processing device, comprising a processing unit and a test control unit connected to the processing unit, is described. The processing unit and the test control unit are arranged to: start a logic test of the processing unit; detect a test abort event; and, in response to the test abort event, perform an event response action which comprises aborting the logic test and booting the processing unit, said booting including executing an event handling routine. The event response action may comprise setting a reset vector to an address of the event handling routine. System availability may thus be improved. In particular, the delay between capturing an asynchronous signal and responding to it may be reduced. The test abort event may, for example, be an asynchronous event having certain pre-defined characteristics. A method of operating a data processing device is also described.

Abstract: A sub-process is performed on a first computing platform to create a portable initialized object. The portable initialized object is communicated to a second computing platform. The second computing platform uses the portable initialized object to replace performing the sub-process.

Abstract: Information reduction in data processing environments includes at least one of: one or more Error Correcting Codes that decode n-vectors into k-vectors and utilize said decoding to information-reduce data from a higher dimensional space into a lower dimensional space. The information reduction further provides for a hierarchy of information reduction allowing a variety of information reductions. Transformations are provided to utilize available data space, and data may be transformed using several techniques including windowing functions, filters in the time and frequency domains, or any numeric processing on the data.

Abstract: Examples may include receiving, at a switch, an Ethernet frame having an Ethernet header that may indicate the Ethernet frame includes a network controller sideband interface (NC-SI) control packet from a management controller at a compute node coupled to the switch. In some examples, a response to a command included in a received NC-SI control packet that was encapsulated in an Ethernet frame may be processed at the switch and sent to the management controller.

Abstract: A method for extending data lifetime for reference in deduplication is provided. The method includes determining that a quantity of user data has at least a threshold amount of data that is re-created in a storage system. The method includes protecting at least portions of the quantity of user data from erasure by garbage collection in the storage system during a predetermined time interval, wherein the protected at least portions are available for data deduplication of further user data in the storage system during the predetermined time interval.

Abstract: Methods, apparatus and computer program products implement embodiments of the present invention that enable a computer system comprising networked computers to self-heal from a boot failure of one of the computers. In some embodiments, upon detecting a first computer having a memory and a physical boot device failing to successfully load a boot image, a second computer defines a virtual boot device in communication with the first computer and the second computer and having a boot image for the first computer. Subsequent to defining the virtual boot device, the second computer can configure the first computer to boot from the virtual boot device.

Abstract: A startup method and apparatus, and a computer system. When a CPU fails to start a system, receiving, by a startup apparatus, a backup area selection instruction, where the backup area selection instruction is used to instruct the startup apparatus to read a boot loader from a backup area of Nand-Flash; receiving a program read instruction sent by the CPU, where the program read instruction includes a primary area address of the boot loader in the Nand-Flash; acquiring a backup address of the boot loader in the Nand-Flash from a correspondence between primary and backup addresses according to the primary area address; reading the boot loader from the backup address; and sending the boot loader to the CPU, such that the CPU starts the system according to the boot loader.

Abstract: Embodiments of the present disclosure include systems and methods for encrypting a virtual machine image and accessing an encrypted virtual machine image. According to some embodiments an encryption module can encrypt a virtual machine image and place an encryption boot loader. The encryption boot loader may be extracted from the encrypted virtual machine image, be transmitted to, and stored at a key storage system. Upon a request to boot an operating system associated with the encrypted virtual machine image, a pre-boot execution environment may communicate with an image service to retrieve the encryption boot loader from the remote key storage system. The virtual machine image may therefore be decrypted suing the encryption boot loader, which may allow booting of the operating system.

Abstract: A technical support system includes a problems data store storing a problem information related to a plurality of problems identified in response to other reported incidents, a problem search module configured to search the problem information based on one or more key words to determine problem information that is relevant to the one or more key words and that is applicable to a general population of computer systems, and a problem filter module configured to filter the determined problem information based on the parameters associated with the end-user's computer system configuration to determine problem information that is specific to the end-user's computer system.

Abstract: A system for the monitoring, management, and protection of networks and network-connected devices is described. The system employs an agent configured to run on each network-connected device, as well as a management console in communication with the agent. The management console functions in tandem with the agent(s). The agent(s) broadcasts heartbeat messages to periodically check-in with the management console in order to determine if any changes have been made to any software on the network-connected device. Additionally, challenges, based on complex code, are periodically transmitted between the management console and the agent(s) in order to verify the authenticity of the agent(s).

Abstract: A microcontroller includes a microprocessor, a serial flash memory interface, and input/output (I/O) terminals for coupling the serial flash memory interface to external serial flash memory. The microprocessor is operable to generate instruction frames that trigger respective commands to read data from specified addresses in the external serial flash memory. The serial flash memory interface receives and processes the instruction frames, obtains the data contained in the specified addresses in the external serial flash memory regardless of whether the specified addresses are sequential or non-sequential, and provides the data for use by the microprocessor.

Abstract: A basic input/output system may be configured to, during boot of an information handling system in a pre-operating system environment of the information handling system, calculate an amount of energy required to perform a persistent memory save operation in a persistent memory of the information handling system in order to transfer data from a volatile memory of the persistent memory communicatively coupled to the processor to a non-volatile memory of the persistent memory communicatively coupled to the volatile memory, cause charging of an energy storage device for providing electrical energy to perform persistent memory save operations at least until a charging level of the energy storage device satisfies the amount of energy, and boot to an operating system of the information handling system responsive to the charging level of the energy storage device satisfying the amount of energy.

Abstract: A primary system is established at a first site. The primary system hosts an application and a primary database for remote users that use the application to manage data of the primary database. A unified data layer is established at a remote site. The unified data layer provides access to data of the primary database without providing access to the primary database. A triggering event that impairs the ability of the primary system to host the application is detected. A recovery system is instantiated in response to detecting the triggering event. The recovery system includes both a recovery instance of the application and a recovery database for the data of the application. The recovery database is populated using the unified data layer. The recovery system is activated such that remote users can access the recovery instance of the application to manage data of the recovery database.

Abstract: A program loading system effective for several different types of motherboard includes a first storage module, a first control module, first switch module, and a type module. The first control module is coupled between the first storage module and the first switch module. The first switch module is coupled between the first switch module and the type module. When a program stored in the first storage module is needed to be loaded, the first switch module is turned on. The type module outputs a motherboard type signal to the first control module through the first switch module. The first control module loads the program selectively according to the type signal received.

Abstract: A dynamic random access memory (DRAM) device includes a memory cell array including a plurality of memory cells, a refresh controller configured to perform a plurality of refresh operations on the plurality of memory cells in response to a plurality of refresh commands from an external device, and a refresh counter configured to count a number of the refresh commands for a fixed period of time and compare the counted number with a threshold. The refresh counter is configured to generate a power failure signal to cause the DRAM device to enter a power failure mode in response to the comparison of the counted number with the threshold. The refresh controller is configured to perform a refresh operation on the plurality of memory cells without control of the external device in the power failure mode.

Abstract: A display method for logo graphics displayed on a screen is provided, implemented by a smart device. The display method includes the following steps: powering on the smart device, to enter a Basic Input Output System (BIOS) stage; accessing, from a first non-volatile memory of the smart device, exclusive logo graphics data private-key encrypted for decryption, and using a public key pre-stored in a second non-volatile memory of the smart device for verification; and displaying, when the public key matches a private key corresponding to the exclusive logo graphics data, an exclusive logo graphic on a screen according to the decrypted and decompressed exclusive logo graphics data. The present invention further includes a smart device, a readable record medium, and a computer program product.

Abstract: An automatic scanning and recovering method for an electronic device is provided herein and executed by the electronic device. The method comprises following steps: a step of receiving a booting command; a step of determining whether a crash flag is in an activating status when the electronic device is turned on; a step of performing a system diagnostics utility to scan and recover the electronic device when the crash flag is in the activating status; and a step of setting the crash flag to be in an inactivating status and performing a rebooting procedure.

Abstract: In accordance with embodiments of the present disclosure, an information handling system may include a processor, a management controller communicatively coupled to the processor and configured to provide out-of-band management of the information handling system, and one or more logic devices. The one or more logic devices may be configured to monitor a power-over-Ethernet input of a network interface communicatively coupled to the one or more logic devices in order to detect an indication at the power-over-Ethernet input of a request to remotely reset the management controller and, responsive to determining presence of the indication at the power-over-Ethernet input of the request to remotely reset the management controller, cause a reset of the management controller.

Abstract: A method for managing an initiation of a computing system. In an embodiment, the method includes a computer processor detecting that a first computing system receives a request to initiate a second computing system. The method further includes accessing a table that includes information associated with a plurality of storage entities that include bootable OS images, where the plurality of storage entities are included in at least one storage system. The method further includes determining a first storage entity that includes a corresponding instance of a first bootable OS image of the requested second computing system. The method further includes initiating the requested second computing system based, at least in part, on the instance of the bootable OS image of the first storage entity.

Abstract: A mechanism for controlling the execution of Option ROM code on a Unified Extensible Firmware Interface (UEFI)-compliant computing device is discussed. A security policy enforced by the firmware may be configured by the computing platform designer/IT administrator to take different actions for different types of detected expansion cards or other devices due to the security characteristics of Option ROM drivers associated with the expansion card or device. The security policy may specify whether authorized signed UEFI Option ROM drivers, unauthorized but signed UEFI Option ROM drivers, unsigned UEFI Option ROM drivers and legacy Option ROM drivers are allowed to execute on the UEFI-compliant computing device.

Abstract: In accordance with embodiments of the present disclosure, a method may include during boot of an information handling system, obtaining from a management controller integral to the information handling system information regarding resource requirements for one or more peripheral devices communicatively coupled to the one or more processor sockets integral to the information handling system and the management controller. The method may also include determining whether a default allocation of resources for the one or more peripheral devices among the one or more processor sockets by a basic input/output system integral to the information handling system satisfies the resource requirements. The method may further include, in response to determining the default allocation does not satisfy the resource requirements, rebalancing resources among the one or more processor sockets to satisfy the resource requirements prior to enumeration of the one or more peripheral devices.

Abstract: Various embodiments of the present technology provide methods for activating a security module of a rack system prior to the loading of an operating system. The security module can be configured to examine server platform security, communicate with an administrator through a baseboard management controller (BMC), certify signatures of firmware pieces on a motherboard of the rack system, exclude malware by isolating unsigned UEFI images, examine a signature list and security key installed on the motherboard, and/or report status of security management to a controller of the rack system (e.g., BMC). When the security module determines that an uncertified firmware or a bootable storage with malware is loaded onto the rack system, the security module can stop process(es) associated with the uncertified firmware and/or the bootable storage, and subsequently send a report the administrator.

Abstract: The invention discloses a method and a device for loading a driver, where the method includes: determining a model identifier corresponding to a component included in an embedded device, and searching for a driver associated with the model identifier; loading a found driver into a memory of the embedded device, and controlling the driver to drive the component. In this solution, when a driver is loaded onto a component onto which a driver is to be loaded, an associated driver is searched for according to a model identifier of the component onto which the driver is to be loaded, and then the associated driver may be loaded. A combination of drivers of multiple components does not need to be searched for, or a combination of identifiers corresponding to drivers of multiple components does not need to be generated. Therefore, consumed time is reduced and loading efficiency is improved.

Abstract: A BIOS settings configuration may be stored in BIOS of a computer system. A default BIOS status may be set as a locked state. The BIOS status can be changed from the locked state to an unlocked state when an authentication request is received and when the received authentication information matches stored authentication information in BIOS. In some embodiments, a BIOS settings change request can be received. The BIOS settings can be modified based on the BIOS settings change request. The BIOS status can be changed back to the locked state after the BIOS settings modification has been made.

Abstract: A system and method of updating device firmware on a rack server computer system using a network switch. The network switch receives a request to update the firmware of a device in the rack server computer system. The network switch determines the location of the device in the rack server system and transmits the firmware update to the device and commands the device to update its firmware using the firmware update transmitted by the switch. Alternatively, the network switch automatically detects a new device connected to the network switch in the rack server computer system. The network switch determines the identification of the new device, including its firmware, and determines if a newer version of the device firmware is available. The network switch obtains the newer version of the device firmware, transmits the firmware to the device, and commands the device to update its firmware with the newer version.

Abstract: A method for initializing a memory subsystem (212) of a management controller (200) includes, with an additional memory initialization module (206) of the management controller (200), initializing the memory subsystem (212) of the management controller (200) in response to the memory subsystem (212) not being properly initialized. A management controller (200) includes a memory subsystem (212) including a memory controller (214) and a memory (216); firmware (208) able to initialize the memory subsystem (212); and a memory initialization module (206) to initialize the memory subsystem (212) if the memory subsystem (212) is not properly initialized.

Abstract: A mechanism for performing a network boot sequence and provisioning a device may generate a command by a server and have the command executed by the device. The command may be used to verify the authenticity of the device, and may be used to establish ownership of the device. After authenticity and, in some cases ownership is established, bootable software may be downloaded and executed. The device may be provisioned with software applications.

Abstract: A system may provide state awareness across communication channels and statefully transition a user between a source channel and a destination channel. A method may include storing a unique identifier associated with the user and data associated with the user, retrieving the data associated with the user based upon the user identifier and in response to the user entering the destination channel that is different from the source channel, and populating the data associated with the user in the destination channel. The destination channel may include a display of a customer service representative, and the populating may occur automatically. Furthermore, the method may include placing a call to a telephone number associated with the user in response to at least one of: the user answering a requisite number of questions in the source channel and the user requesting a transition to a voice destination channel.

Abstract: Embodiments herein relate to loading boot data. In an embodiment, a device loads boot data from a first portion of a first non-volatile memory to complete a first booting of the device. The first portion of the first non-volatile memory is then released to allow the device to overwrite the first portion. Next, the boot data is written to the first non-volatile memory before the device enters a reduced power state. The written boot data is to be loaded from the first non-volatile memory to complete a second booting of the device, if the second booting is initiated.

Abstract: In an example, a system-on-chip (SoC) includes a hardware power-on-reset (POR) sequencer circuit coupled to a POR pin. The SoC further includes a platform management unit (PMU) circuit, coupled to the hardware POR sequencer circuit, the PMU including one or more central processing units (CPUs) and a read only memory (ROM). The SoC further includes one or more processing units configured to execute a boot process. The hardware POR sequencer circuit is configured to initialize the PMU. The one or more CPUs of the PMU are configured to execute code stored in the ROM to perform a pre-boot initialization.

Abstract: A boot recovery system includes a serial peripheral interface (SPI) storage that stores a primary boot block. A primary SPI controller is connected to the SPI storage through a primary SPI bus. An embedded controller (EC) includes an EC storage that stores a recovery boot block. The EC is coupled to the primary SPI bus through a secondary SPI bus. The EC is configured to determine that the primary boot block should be replaced, retrieve the recovery boot block from the EC storage, replace the primary boot block in the SPI storage with the recovery boot block through the secondary SPI bus, and initiate an information handling system (IHS) reboot process. The determining, retrieving, replacing, and initiating may be performed by the EC while a processing system that is coupled to the primary SPI controller is not in an operating mode.

Abstract: A computation unit detects booting of a virtual machine or a physical machine in a system. The computation unit collects configuration parameters from virtual machines or physical machines in the system. The computation unit retrieves information about a constraint on the system from a storage device, in relation to the detected booting of a virtual machine or physical machine. The computation unit determines whether the collected configuration parameters satisfy the retrieved constraint, and it controls whether to continue or discontinue the boot process of the virtual machine or physical machine, depending on the result of the determination.