Abstract: An electronic apparatus installable with firmware updatable via a network includes an input unit configured to receive an operation performed by a user; and circuitry configured to display, on a display, a first screen for displaying a first function of firmware that can be installed on the electronic apparatus, and a second screen for displaying a second function of the firmware, the second function including a plurality of second functions and the second screen including a plurality of second screens prepared for each one of the plurality of second functions, enable the first function in response to an operation for the first function displayed on the first screen, and enable the second function in response to an operation for the second function displayed on the second screen. The circuitry enables the second functions selected from the plurality of second functions respectively displayed on the plurality of second screens.

Abstract: A computer-implemented method includes defining a deployment pipeline for each application of a collection of applications, the deployment pipeline comprising an ordered plurality of waves of deployment wherein the ordered plurality of waves of deployment comprises a set wave of deployment and a variable wave of deployment with the set wave of deployment comprising deployment to a plurality of locations that is the same for each application in the collection of applications. For each application in the collection of applications, a list of locations selected by a respective user for the variable wave of deployment is received such that two applications of the collection of applications deploy to different locations during their respective variable wave of deployment. An indication that the build of the application has been created is received and in response, one of the plurality of waves of deployment is executed.

Abstract: Methods, systems, and computer-readable storage media for receiving, by an application studio, user input indicating two or more artifacts of an enterprise application developed using the application studio, generating, by an enterprise application artifact composer of the application studio, an enterprise application artifact as a universal tag that provides an abstract representation of the enterprise application, and during deployment of the enterprise application: retrieving the enterprise application artifact, determining a target runtime that the enterprise application is to be deployed to, determining a set of dependencies for each artifact of the enterprise application, and for any dependency in the set of dependencies that is absent from the target runtime, retrieving binary code of the dependency from a library to deploy the dependency to the target runtime.

Abstract: A computer that dynamically maps traffic to different versions of software is described. During operation, the computer may receive first traffic from a first tenant and second traffic from a second tenant, where the first traffic and the second traffic are addressed to a common computing environment that supports multiple, different tenants. Then, the computer may identify the first tenant based at least in part on first information included in the first traffic, and may identify the second tenant based at least in part on second information included in the second traffic. Moreover, the computer may dynamically map the first traffic to a first version of software and the second traffic to a second version of the software, where the dynamic mapping occurs at runtime. Note that the computer may concurrently execute the first version of the software and the second version of the software.

Abstract: Systems and methods are disclosed for providing secure remote software updates to a cyber-physical systems (CPS) device. The method may include receiving, at a first server, data used to update software of at least one CPS device, converting the data into a first format, establishing a secure connection between the first server and a second serve, transmitting the data in the first format from the first server to the second server, identifying each CPS device that is authorized to receive a software update, encrypting a software update package to ensure that the software update is decrypted by each CPS device that is authorized to receive the software update and is not decrypted by an CPS device that is not authorized to receive the software update, and transmitting the encrypted software update package to each CPS device.

Abstract: An information processing method includes obtaining version information of an operating system to be installed at a computer apparatus; determining whether the operating system to be installed is supported by the computer apparatus according to the version information; and in response to determining that the operating system to be installed is not supported by the computer apparatus, displaying a prompt message on a current interface of the computer apparatus before an installation path of the operating system is determined, the prompt message being configured to prompt a user that the computer apparatus does not support the operating system to be installed.

Abstract: Aspects of data management are described. A cluster-level state machine may be instantiated for an update procedure for updating software for a cluster of storage nodes, where the update procedure may be configured to serially update the plurality of storage nodes. The cluster-level state machine may be configured to monitor the update procedure at a cluster level. One or more node-level state machines may be instantiated for the update procedure, where the one or more node-level state machines may be configured to monitor the performance of the update procedure at a storage node level. During an update procedure, the state of the cluster-level state machine may reflect a state of the cluster of storage nodes and the state of a node-level state machine may reflect a state of a respective one or more storage nodes.

Abstract: A device configured to identify a file in a network device, to generate a first set of block hash codes for data blocks for a first instance of the file, and to generate a second set of block hash codes for data blocks for a second instance of the file. The device is further configured to determine the first set of block hash codes matches the second set of block hash codes and to generate an entry in a file list for the instances of the file. The device is further configured to count the number of entries that are associated with the file and to determine the number of entries is greater than the redundancy threshold value. The device is further configured to delete one or more instances of the file in response to determining that the number of entries is greater than the redundancy threshold value.

Abstract: Systems and methods are provided for in-service software upgrades using centralize database versioning and migrations. The systems and methods described herein can intercept protocol messages between a client and a network device and run a first control plane comprising an origin state database and a plurality of un-migrated services. The system can generate a target state data model, wherein an origin state data model associated with the origin state database migrates to the target state data model, and copy the origin state database. The system can migrate second control plane software to the target state database and operate un-migrated services in accordance with the first control plane software and the copied origin state database while operating migrated services in accordance with the second control plane software and the target state database.

Abstract: In one embodiment, a method includes providing, to a client system of a user, a user interface for display. The user interface may include a first set of options for selecting an artificial intelligence (AI) task for integrating into a user application, a second set of options for selecting one or more devices on which the user wants to deploy the selected AI task, and a third set of options for selecting one or more performance constraints specific to the selected devices. User specifications may be received based on user selections in the first, second, and third sets of options. A custom AI model may be generated based on the user specifications and sent to the client system of the user for integrating into the user application. The custom AI model once integrated may enable the user application to perform the selected AI task on the selected devices.

Abstract: A data processing system implements obtaining policy information for an update to be deployed to one or more components of a cloud-based service identifying a plurality of rings of the cloud-based service to which the update is to be deployed; analyzing the policy information to determine configuration information for a plurality of installer instances each associated with one or more rings or one or more stages of a ring to which the update is to be deployed; obtaining payload information for each respective installer instance, the payload information indicating one or more payloads associated with the update to be deployed to the respective one or more rings or one or more stages of the ring associated with the respective installer instance; and deploying the one or more payloads for each of the one or more rings or the one or more stages of the ring associated with each installer instance.

Abstract: An update management program makes an information processing device realize functions of: acquiring updated version information on software of an engineering tool and firmware of a control device; acquiring a software version of the engineering tool installed in the information processing device; acquiring a firmware version of the firmware installed in the control device connected to the information processing device; confirming available updated versions for the software version and for the firmware version on the basis of comparison with the updated version information; creating an update screen for selecting auto-updating for the software and the firmware installed; and instructing that the software of the engineering tool and the firmware of the control device for which the auto-updating is selected on the update screen and the updated versions are confirmed be automatically updated to the updated versions.

Abstract: The described technology is generally directed towards adaptively selecting a repetition level in wireless communications, based on events to improve coverage range via the repetition level while not unnecessarily reducing throughput. One such event can include a current signal-to-noise-ratio, e.g., as reported in a channel quality indicator report from a user equipment. Another such event can comprise a number of consecutive hybrid automatic repeat request acknowledgments or negative acknowledgments (HARQ ACKS/NACKS), in which consecutive ACKs tend to indicate good signal quality, while consecutive NACKs tend to indicate poor signal quality. A combination of channel quality indicator-based adaptive repetition level and HARQ ACK/NACK-based adaptive repetition level can be employed.

Abstract: The Search Extraction Matching, Draw Attention-Fit Modality, Application Morphing, and Informed Apply Apparatuses, Methods and Systems (“SEMATFM-AMIA”) transforms inputs including new job listing introduction inputs, via SEMATFM-AMIA components (e.g., the conductor component, the resume view controller component, the XY paths handler component, the title handler component, the resume librarian component, and the job listing librarian component), into outputs including relevant resume outputs and/or augmented new job listing record outputs. It is noted that the terms “component” and “object” may be used interchangeably hereinthroughout. In one embodiment, the SEMATFM-AMIA includes an apparatus, comprising: a memory, a component collection in the memory, and a processor disposed in communication with the memory, and configured to issue a plurality of processing instructions from the component collection stored in the memory.

Abstract: Disclosed are techniques for performing a low-impact firmware update to a first microcontroller. In an aspect, a security entity communicatively coupled to the first microcontroller receives an update to firmware of the first microcontroller, authenticates the update to the firmware of the first microcontroller to prevent a security-related rollback, offloads system management tasks and interrupt handling from the first microcontroller to at least a second microcontroller communicatively coupled to the first microcontroller, coordinates installation of the update to the firmware of the first microcontroller without taking processing cycles from host software, and restores, to the first microcontroller, system management states occurring after the system management tasks and interrupt handling are offloaded from the first microcontroller.

Abstract: A method for updating software in one or more servers in a managed system includes bootstrapping of shared secrets to secure communication, using an object store with publicly accessible URLs as a mailbox system between a patch agent locally at the managed system and a patch management server located remotely. The object store provides for indirect and asynchronous communication, allowing the patch management server to manage the updates, whereas the patch agent executes the updates. The patch management server keeps track of update results, and when an update is unsuccessful it performs and supports a remediation process. Both the patch agent and the patch management server keep full logs of the update results to allow for auditing.

Abstract: A method for updating firmware of a locking device includes establishing a connection between a user device and the locking device and providing a set of firmware packages for display on a user interface of an application. The method includes receiving data indicative of a firmware package that has been selected via the user interface of the application. The method includes completing a transaction involving the firmware package. The method includes receiving, from an application server, installation data for the firmware package that has been selected. The method includes providing the installation data for the firmware package to the locking device to cause the locking device to use the installation data to update the firmware of the locking device, wherein the firmware, once installed on the locking device, allows for reconfiguration of firmware-controlled functions and operating modes of the locking device by supplementing or replacing firmware of the locking device.

Abstract: A car monitoring system includes: a sub-system to execute a predetermined function by controlling at least one instrument mounted on a railcar; and a monitoring device to monitor an operating state of the sub-system. The sub-system includes: a sub-system controller to create status data containing pieces of event information based on a signal output from the instrument and periodically transmit the status data to the monitoring device, the information informing the monitoring device of a change in state of the instrument; and a first memory to store a first event parameter file defines a data structure of an event region of the status data, the event region being a region wherein the information are stored. When the first parameter file is changed, and the sub-system controller creates the status data, the controller reconstructs the data structure of the region and resets the information in accordance with the reconstructed data structure.

Abstract: An initial risk of an electronic message is determined. Based on the initial risk, it is determined whether to modify the electronic message. In an event it is determined to modify the electronic message: the electronic message is modified; the modified electronic message is allowed to be delivered to an intended recipient of the electronic message; a secondary computer security risk assessment of the electronic message is automatically performed; and based on the secondary computer security risk assessment, the modified message is updated.

Abstract: At a first compute instance run on a virtualization host, a local instance scaling manager is launched. The scaling manager determines, based on metrics collected at the host, that a triggering condition for redistributing one or more types of resources of the first compute instance has been met. The scaling manager causes virtualization management components to allocate a subset of the first compute instance's resources to a second compute instance at the host.

Abstract: When a configuration is generated in a distributed computing system, a first group of nodes is selected for validating the configuration and the configuration is deployed on the first group of nodes. When the first nodes in the group of nodes validate the configuration, the nodes sign the configuration with a signature. When a subsequent node is to implement the configuration, the subsequent node validates the signature on the configuration to ensure that the nodes in the first group of nodes validated the configuration. If the signature is validated, the subsequent node deploys the configuration.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for executing process flows. A package including flow permission metadata indicating a set of flow permissions associated with a set of flows is obtained. Upon receiving a request to initiate execution of a flow in the set of flows, the flow permission metadata is accessed. The flow includes a plurality of flow elements, where each of the flow elements represents a corresponding set of computer-readable instructions. Based upon the set of flow permissions of the flow permission metadata, it is determined whether the user is permitted to execute the flow. Execution of the flow is initiated upon determining that the user is permitted to execute the flow. During execution of the flow, flow performance data such as an identification of paths of the flow that have been traversed may be obtained, where each of the paths corresponds to one or more of the flow elements.

Abstract: In a vehicle electronic control system, a vehicle master device is configured to acquire data storage bank information including information for specifying which bank is an active bank and information for specifying software versions of an active bank and an inactive bank from a rewrite target ECU that has a non-volatile memory with a plurality of data storage banks and to transmit the data storage bank information acquired by the data storage bank information acquisition unit to a center device. The center device is configured to select update data compliant to the inactive bank on the basis of the software versions and the active bank specified by the data storage bank information received from the vehicle master device and to transmit a distribution package including the update data selected by the update data selection unit to the vehicle master device.

Abstract: A method for deploying product applications within virtual machines onto on-premises and public cloud infrastructures. Specifically, the disclosed method proposes a migration scheme of virtual machine images (configured at least with product applications and guest operating systems) from an on-premises infrastructure to a public cloud infrastructure. Further, the migration scheme considers two workflows—a normal workflow contingent on the public cloud infrastructure having up-to-date support for the guest operating systems; and an exception workflow contingent on the public cloud infrastructure lacking up-to-date support for the guest operating systems.

Abstract: An embodiment of the present invention is directed to a system and method for implementing a self-driven change detection release automation. According to an embodiment of the present invention, a software release bot may be created and installed on software running environment. The bot may further detect changes on a server environment. For example, the bot may be integrated with scheduling and other tools where the bot is programmed to wake up at predetermined time intervals, e.g., 15 minutes. According to an embodiment of the present invention, the bot may handle release activities defined in the configuration, e.g., stop, start, send notification, etc. The bot is able to save release events log for change audit.

Abstract: A software deployment method in a server includes: obtaining a software update for deployment to a plurality of media processing devices; performing a primary deployment phase by: (i) transmitting the software update to selected media processing devices according to a primary deployment rate; (ii) responsive to the transmission, for each selected media processing device, updating a status indicator representing whether deployment of the software update succeeded; and (iii) determining, based on the status indicators, whether an update promotion condition has been satisfied; in response to determining that the update promotion condition has been satisfied, performing a secondary deployment phase by: transmitting the software update to further selected media processing devices according to a secondary deployment rate exceeding the primary deployment rate.

Abstract: A control device includes a main storage device that stores a user program and program packages in a nonvolatile manner; a main memory having a package management module arranged therein; and a processor. The package management module performs a deployment process for selecting, from the program packages, a package to be deployed based on a version of the user program, and arranging, from the package to be deployed, a version of a program compatible with the version of the user program in the main memory.

Abstract: A method for performing an application upgrade includes: performing an emulation to generate an application upgrade strategy for applying a plurality of application upgrades on a client device; determining a user behavior of a user of the client device; generating an application upgrade summary list using the application upgrade strategy and the user behavior; providing the application upgrade summary list to the user of the client device; and after the providing, initiating upgrading of the client device using a reordered application upgrade strategy generated in response to feedback from the user, in which the reordered application upgrade strategy is generated based on the application upgrade strategy and the user behavior.

Abstract: Disclosed are various examples for downloading data objects by enforcing a threshold amount of allocated data. In one example, among others, an application downloads a first subset of the files from a remote file management system. A user interface displays file system entries that represent the first subset of downloaded files and a second subset of undownloaded files from the remote file management system. The application detects an event for a respective file system entry associated with a respective file from the second subset of undownloaded files. The respective file is downloaded from the remote management system.

Abstract: A vehicle control system includes a plurality of devices, a first device included in the devices including: a storage configured to store consistency information including a permitted combination of versions of software installed on each of one or more devices in association with each of the control functions; a determination unit configured to determine whether the consistency information consistent with versions of software installed on a part of the devices exists when consistency does not exist in the versions of all software installed on each of the devices; and a performance control unit configured to permit performance of a part of control functions associated with the consistency information consistent with the versions of software installed on the part of the devices when the consistency information consistent with the versions of software installed on the part of the devices exists.

Abstract: A system includes a source vehicle and a destination vehicle. The destination vehicle is configured to determine that the source vehicle and the destination vehicle are suitably close to exchange data through a wireless communications channel, compare current version numbers in the destination vehicle with approved version numbers in the source vehicle, approve an update for one or more current software components in the destination vehicle in response to one or more criteria, receive one or more approved software components at the destination vehicle from the source vehicle via the wireless communications channel in response to the current version numbers of the current software components approved for the update being different from corresponding ones of approved version numbers of the approved software components, and update the one or more current software components in the destination vehicle with the one or more approved software components received from the source vehicle.

Abstract: An information handling system downloads device drivers for recovery operation of the information handling system, and subsequently obtains first configuration information associated with each of the device drivers. The system performs an inventory of devices associated with the information handling system that includes obtaining second configuration information associated with each of the devices in the inventory, and compares the first configuration information and the second configuration information. If the particular device driver is missing, then the system downloads the particular device driver prior to boot to a service operating system.

Abstract: In one example, a method for updating an application that has multiple instances running in a distributed cloud environment is disclosed. The method may include the operation of generating a dynamic property bus interface. The method may write an application property value through the dynamic property bus interface to a database for storage and propagate the property value to the multiple instances of the application in the distributed cloud environment.

Abstract: A building network system of a building includes a network system. The network system includes one or more processing circuits. The one or more processing circuits are configured to receive network data from a building network of the building, the network data associated with a plurality of pieces of building equipment of the building. The one or more processing circuits are configured to generate a digital network twin of the building network based on the network data, the digital network twin representing the plurality of pieces of building equipment and relationships between the plurality of pieces of building equipment. The one or more processing circuits are configured to identify one or more network updates to the building network based on the digital network twin. The one or more processing circuits are configured to deploy the one or more network updates to the building network.

Abstract: A system and method for providing a secure image load. The system includes a microcontroller. The microcontroller has a plurality of physically modifiable internal components (PMIC). Each of the plurality of PMICs can only be modified one time. The system further includes an image loader configured to load a boot image from the memory of the microcontroller, and a checksum calculator configured to calculate a checksum value for the boot image. The system further includes a checksum burner configured to modify the plurality of PMICs to create a binary representation of the checksum value for the image. A checksum value is calculated for the image. This checksum value is written to the microcontroller. The value is burned into the microcontroller using the PMICs. Further, responses to the checksum mismatch are burned into the microcontroller using the PMICs that are present in the microcontroller.

Abstract: A method and device for controlling an autonomous driving vehicle, and an autonomous driving vehicle. Wherein the method comprises: detecting error information of different components in a vehicle, wherein the different components comprise at least one of the following: a power supply, a sensor, a navigation device, a log memory and a processing device; if the error information of any component is detected, feeding back the detected error information to a processor; restarting the vehicle’ automatic driving function based on a feedback result, wherein the feedback result is feedback by the processor according the detected error information. The present invention solves the technical problem that the autonomous driving vehicle in the related art cannot perform error information detection on the components in the vehicle which leads to the low reliability of the autonomous driving vehicle.

Abstract: A method includes encoding a data segment into a set of encoded data slices using erasure coding; storing, in storage units of a storage network, the set of encoded data slices, in accordance with a shared key-based encryption system (SKBES) having keys shared with the storage units; retrieving, at a periodic rate and in accordance with the SKBES, the set of encoded data slices from the storage units of the storage unit to verify whether individual slices of the set of encoded data slices have been corrupted. When one of the set of encoded data slices stored in one of the storage units has been corrupted, rebuilding the one of the set of encoded data slices by: retrieving the decode threshold number of other slices of the set of encoded data slices, in accordance with the SKBES; reconstructing the one of the set of encoded data slices based on the erasure encoding, to generate a reconstructed data slice; and storing, in accordance with the SKBES, the reconstructed data slice in the one of the storage units.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for dynamic user interface customization. A set of functions for a user interface is stored, each function comprising a function that can be added to the user interface. A first set of data is transmitted to a remote device that causes the user interface to be displayed on the remote device with a predetermined set of functions from the set of functions. Interaction data is received indicative of a user's interactions with the user interface. A second set of data is transmitted to the remote device that causes the user interface to dynamically add a new function from the set of functions to the user interface based on the interaction data, wherein the new function is displayed as a selectable item in the user interface that the user can select to use a function associated with the new function.

Abstract: Service-to-service role mapping systems and methods are disclosed herein. An example role mapping service is positioned between a directory service and a search engine service, the directory service managing user information and permissions for users, the role mapping service mapping one or more search engine service roles to a user based on the user information and permissions received from the directory service.

Abstract: A center configured to communicate with an OTA master configured to control software updating of a plurality of electronic control units installed in a vehicle includes: a communication device configured to receive, from the OTA master, identification information; a storage device storing propriety determination information used in propriety determination of determining whether the version of software implemented in each of the electronic control units is an implementation management version; and a processor configured to perform the propriety determination based on the identification information and the propriety determination information, and perform, by communicating with the OTA master, restoration control on at least one of the electronic control units regarding which a determination has been made that the version of the software is not the implementation management version.

Abstract: Methods and systems of managing payment cards are disclosed. A financial institution computing system includes a token database storing a plurality of tokens and token information, a network interface circuit enabling the financial institution computing system to exchange information over a network; and a token management circuit. The token management circuit enables a graphical user interface on a customer device over the network that can be used to generate new token requests, re-provision token requests, and management requests. The management requests enable and disable tokens, such that transactions against a payment card account using an enabled token are completed, and transactions against the payment card account using a disabled token are denied.

Abstract: There is provided with an image capturing control apparatus. A first storing unit configured to store, in advance, first signal information that is obtained by processing a captured first image. A first processing unit configured to send the first image to a second storing unit that is different from the first storing unit. A second processing unit configured to process the first image stored in the second storing unit. A determination unit configured to determine whether or not at least one of the second processing unit and the second storing unit is anomalous based on whether the first signal information matches second signal information obtained by the second processing unit processing the first image.

Abstract: Embodiments disclosed include systems and methods for computer automated print services control comprising authenticating a user credential input via a user device. The system and method includes generating, by a printer driver comprised in the user device, a user interface comprising features supported by a plurality of printing devices. Further, it includes receiving via the user device over the network, a print instruction comprising the features supported by the plurality of printing devices connected to the computer system over the network. And based on the print instruction, generating a print job in an embodiment. Further, based on the user authentication at one of the plurality of printing devices, converting via a gateway, the received print instruction into a format compatible with that printing device and releasing the generated print job for printing at that printing device, according to an embodiment.

Abstract: A method includes receiving a text description of a system capability request, and converting the text description into a normalized description of the system capability request. A repository is then queried, based on the normalized description and using a search algorithm, to identify multiple candidate application software units (ASUs). The candidate ASUs are displayed to a user for selection. The user-selected ASU is then deployed, either locally or to at least one remote compute device, in response to receiving the user selection. Deployment can include the user-selected candidate ASU being integrated into a local or remote software package, thus defining a modified software package that is configured to provide the system capability.

Abstract: A method for managing an application upgrade includes: obtaining metadata of a client device from a production host (PH) client device twin; executing, using the metadata, an emulation to generate an application upgrade strategy for applying a plurality of application upgrades; setting, using the metadata, a first entry in a PH required properties file; transferring the application upgrade strategy and the first entry from the PH client device twin to a client environment (CE) client device twin; storing, the application upgrade strategy and the first entry in a CE required properties file; initiating the plurality of application upgrades based on the application upgrade strategy and the first entry; setting a second entry in a CE reported properties file; transferring the second entry from the CE client device twin to the PH client device twin; and verifying a status of the plurality of application upgrades using the second entry.

Abstract: A cryptographic circuit performs a substitution operation of a cryptographic algorithm. For each substitution operation of the cryptographic algorithm, a series of substitution operations are performed by the cryptographic circuit. One of the substitution operations of the series is a real substitution operation corresponding to the substitution operation of the cryptographic algorithm. One or more other substitution operations of the series are dummy substitution operations. A position of the real substitution operation in said series is selected randomly.

Abstract: Provided are a method and apparatus for updating an edge node, a device, a medium and a program product which relate to the technical field of computers and in particular to the technical fields of edge computing, cloud computing and cloud services. In an embodiment, a module update instruction is received from a cloud server, where the module update instruction includes information about a to-be-updated module; an auxiliary unit or a master unit is used as a target module according to the information about the to-be-updated module, and the to-be-updated module is updated through the target module; and in a process of updating the to-be-updated module, data interaction is performed between the target module and the cloud server.

Abstract: A virtualization partition (VP) is executed by a virtualization layer. The VP contains guest software that executes in isolation within the VP. The guest software has a background task (BT) that needs to be performed in the future. The BT is virtualized by a BT service that executes outside of the VP. The guest software registers the BT, through the virtualization layer, with a BT virtualization service. An event occurs outside of the VP that triggers the BT. The BT virtualization service responds to the event by assuring that the VP is available (executing), and optionally triggers (possibly indirectly) the execution of code in the application.

Abstract: An information handling system includes a provisioning server and a server. The server includes a baseboard management controller (BMC) that configures a first ownership certificate for the server, and provides it to the provisioning server. The first ownership certificate is associated with a first owner. The BMC receives a first signed provisioning configuration content, and stores the first signed provisioning configuration content in an encrypted memory. The BMC configures a second ownership certificate for the server, and provides it to the provisioning server. The second ownership certificate is associated with a second owner. The BMC receives a second signed provisioning configuration content, and stores the second signed provisioning configuration content on top of the first signed provisioning configuration content in the encrypted memory.

Abstract: A storage system and method of operating the storage system is described where the metadata used to access the data stored in a storage device is distributed amongst a plurality of controllers in communication with a user, with each other and with the storage device. Each controller stores at least the metadata needed to access the data relevant to the user at the time, and metadata is updated to respond to internal system activities such as device failures, snapshots, backup operations or the like. To preserve coherence of the metadata, each metadata update is communicated to the other controllers and the storage device. The update is either transmitted to the other controllers and to the storage device and each metadata location is updated, or the update is transmitted to the storage device and each of the controllers is instructed to request an update from the storage device.