A BMC holds a host computer in a reset state by asserting a reset signal to the host computer. The BMC accesses at least a part of a BIOS image of the host computer from a storage device shared between the BMC and the host computer while the host computer is held in the reset state. The BIOS image is protected based on a private key of a public key/private key pair. The BMC validates at least the part of the BIOS image based on a public key of the public key/private key pair. The BMC releases the reset signal to enable the host computer to start a boot process upon successful validation of at least the part of the BIOS image.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
A BMC determines to reboot a hardware component. A firmware image for the hardware component is stored in a non-volatile memory of the hardware component. The BMC reads the firmware image of the hardware component from the non-volatile memory of the hardware component. The BMC verifies the firmware image of the hardware component using a public key of a public-private key pair to determine integrity and authenticity of the firmware image. The public key is stored in a BMC firmware image. The BMC allows the hardware component to boot from the firmware image in response to the firmware image passing the verification.
A BMC determines that a binary image for a device of a host computer is to be updated. The BMC scans the binary image for malicious code using a binary scanning application. The BMC prevents updating the device with the binary image in response to detecting malicious code in the binary image during the scanning.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
G06F 21/56 - Computer malware detection or handling, e.g. anti-virus arrangements
A firmware executes upon power on of a processing system and identifies any memory devices present in the processing system. The firmware then obtains uniquely identifying information for the memory devices such as, for example, part numbers and serial numbers. If the boot is the first boot of the processing system, the firmware transmits the uniquely identifying information for the memory devices to an endorsement service. The endorsement service, in turn, receives the identifying information and consults inventory data to determine if the memory devices are authorized for use in the processing system. The endorsement service then returns a response to the processing system that identifies any of the memory devices that are not authorized for use with the processing system. Upon receiving the response, the firmware disables any memory devices identified by the endorsement service as not being authorized for use with the processing system.
G06F 21/64 - Protecting data integrity, e.g. using checksums, certificates or signatures
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a BMC. The BMC receives, from a requester, a request for a measurement of a firmware component of the BMC. The BMC obtains a current measurement of the firmware component. The BMC retrieves a previous measurement of the firmware component. The BMC sends, to the requester, a response containing the current measurement and the previous measurement of the firmware component.
In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a BMC. The BMC receives a consolidated firmware update image. The consolidated firmware update image contains one or more firmware modules for one or more components of a data center secure control module (DC-SCM). The BMC parses the consolidated firmware update image. The parsing identifies the one or more firmware modules. The BMC selects a set of hardware components to be updated based on the parsing of the consolidated firmware update image. The BMC updates firmware of the selected set of hardware components using the corresponding firmware modules from the consolidated firmware update image.
An application framework for managing information technology (“IT”) infrastructure includes components that enable jobs to be defined and executed that perform IT infrastructure management tasks. Jobs are defined utilizing a user interface (“UI”) that includes a first pane that provides functionality for receiving a selection of a target type of IT infrastructure for a job. Compatible action blocks are then displayed in a second pane of the UI. User input can be received associating action blocks with a third pane of the UI. When user input is received associating an action block with the third pane of the UI, a task identifier is displayed in the third pane of the UI. The UI can also receive a selection of target devices upon which the actions defined by a job are to be performed. The framework executes program code corresponding to action blocks in the job on the target devices.
H04L 41/22 - Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks comprising specially adapted graphical user interfaces [GUI]
8.
COLLECTION OF BMC AND SYSTEM APPLICATION HEALTH PARAMETERS AND CREATION OF A CORRELATED DATA MODEL FOR ANALYTICS
A BMC collects at least one of: data related to one or more processes executed on the BMC, data related to one or more processes executed on a host coupled to the BMC, data related to resource allocation at the BMC, data related to resource allocation at the host, fault statistics at the BMC, fault statistics at the host, network statistics at the BMC, network statistics at the host, hardware sensor data at the BMC, and hardware sensor data at the host. The BMC aggregates the collected data into a consolidated data set. The BMC transmits the consolidated data set to a management system. The BMC receives instructions from the management system to adjust operational parameters of at least one of the BMC and the host. The BMC adjusts the operational parameters based on the received instructions.
H04L 9/32 - Arrangements for secret or secure communicationsNetwork security protocols including means for verifying the identity or authority of a user of the system
A computing device is configured with a hardware root of trust (“HRoT”). The HRoT and a remote registration server exchange public keys while the device is in a trusted environment. The device is then locked by setting a lock status in the HRoT. The device can then be shipped to a recipient. When the device is powered on following transit, the HRoT pauses booting of the device. If a request to unlock the device is received, the HRoT provides an encrypted one-time password to the registration server. The registration server decrypts the one-time password and provides the decrypted one-time password to the HRoT. If the HRoT determines that one-time password received from the registration server is identical to the one-time password it generated, the HRoT sets the lock status of the device to unlocked and allows the device to boot.
In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a BMC. The BMC receives a management instruction directed to a Peripheral Component Interconnect Express (PCIe) switch. The BMC generates a corresponding command for the PCIe switch based on the management instruction. The BMC transmits the corresponding command to the PCIe switch to configure or operate the PCIe switch dynamically.
In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a BMC. The BMC detects a platform type of a modular hardware system. The BMC searches for platform-specific files in a storage of the BMC based on the detected platform type. The BMC determines whether the platform-specific files are present in the storage of the BMC. When the platform-specific files are present in the storage of the BMC, the BMC reads the platform-specific files from the storage of the BMC, and the BMC initializes a service using the platform-specific files read from the storage of the BMC.
In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus initializes a build orchestrator configured to monitor system events from different server systems. The apparatus receives, at the build orchestrator, an event indicating a hardware change in a modular hardware system. The apparatus selects, by the build orchestrator, appropriate firmware components for the identified hardware change. The apparatus assembles the selected firmware components into the customized firmware image tailored to the identified hardware change.
A computing system includes a baseboard management controller (“BMC”) that receives a security token from a management system. The computing system also executes a firmware that collects measurements from components of the computing system. The measurements include data describing the components for use in attestation. The firmware provides the measurements to the BMC, which generates a digital signature of the measurements and the security token. The BMC provides the measurements and the digital signature to the management system, which attempts to verify the digital signature utilizing a public key associated with the BMC. If the management system can verify the digital signature, then the BMC utilized the correct security key to generate the digital signature and the measurements were not tampered with after collection by the firmware. The measurements can then be utilized to attest the computing system.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer software and firmware for operating system programs; Downloadable computer firmware for artificial intelligence (AI) firmware development, test automation, telemetry, data analytics, and health monitoring; Downloadable computer programs using artificial intelligence (AI) for firmware development, test automation, telemetry, data analytics, and health monitoring; Downloadable chatbot software for artificial intelligence (AI) firmware development, test automation, telemetry, data analytics, and health monitoring; Downloadable cloud-based software for artificial intelligence (AI) firmware development, test automation, telemetry, data analytics, and health monitoring Design and development of computer firmware; Design and development of artificial intelligence (AI) software; Software as a service (SAAS) services featuring software for cloud-based AI platforms, research and development of computer software and firmware; Information services in the field of software as a service (SAAS); Providing temporary use of on-line non-downloadable firmware for cloud-based AI platforms, research and development of computer software and firmware; Technical consulting in the field of artificial intelligence (AI) software customization; Research and development of computer software; Technical support services, namely, troubleshooting of computer software problems
15.
TECHNIQUES OF ENCRYPTING BMC AND BIOS FIRMWARE AND DATA IN FLASH MEMORY USING CO-PROCESSOR
In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus is a BMC. The BMC obtains data to be written to a storage. A main processor of the BMC provides the data to a co-processor of the BMC. The co-processor encrypts the data into encrypted data. The co-processor stores the encrypted data to the storage.
In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus is a BMC. The BMC receives data to be written to a storage. The BMC encrypts the data using a stream encrypt engine to generate encrypted data. The BMC writes the encrypted data to the storage. The BMC receives encrypted data read from the storage. The BMC decrypts the encrypted data using a stream decrypt engine to generate decrypted data. The BMC provides the decrypted data to a component of the BMC.
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer software and firmware for operating system programs; Downloadable computer firmware for providing the system’s Secure Root of Trust responsible for critical security functions; Downloadable computer firmware for implementing secure control functions of internal hardware power and thermal management; Downloadable computer firmware for managing system tasks to safely handle changes in critical factors of power use and thermal loading; Downloadable computer firmware for detecting and correcting hardware errors, ensuring system redundancy and failover mechanisms for sustained operation during hardware failures, and providing logging, monitoring, diagnostics, and remote management to simplify system maintenance and troubleshooting; Downloadable computer firmware for defining APIs for thermal, inventory, software, fan control, security, communicate with other management controllers and power management for satellite devices; Downloadable computer firmware for managing and securing system resources Design and development of computer firmware
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer software and firmware for operating system programs; Downloadable computer firmware for providing the system’s Secure Root of Trust responsible for critical security functions; Downloadable computer firmware for for implementing secure control functions of internal hardware power and thermal management; Downloadable computer firmware for managing system tasks to safely handle changes in critical factors of power use and thermal loading; Downloadable computer firmware for detecting and correcting hardware errors, ensuring system redundancy and failover mechanisms for sustained operation during hardware failures, and providing logging, monitoring, diagnostics, and remote management to simplify system maintenance and troubleshooting; Downloadable computer firmware for defining APIs for thermal, inventory, software, fan control, security, communicate with other management controllers and power management for satellite devices; Downloadable computer firmware for managing and securing system resources Design and development of computer firmware
In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus is a BMC. The BMC detects a boot failure from both an active firmware image and a recovery firmware image. The BMC starts a recovery protocol to acquire a fallback firmware image from a first source once it identifies the failure. The BMC flashes the obtained fallback firmware image onto its storage device. The BMC initiates a boot process using the fallback firmware image.
G06F 11/14 - Error detection or correction of the data by redundancy in operation, e.g. by using different operation sequences leading to the same result
A firmware is configured with a firmware management protocol (“FMP”) capable of updating a firmware logo image and a firmware logo image volume is defined within a firmware for storing a firmware logo image. A firmware logo image updater executing on a computing device receives a UEFI capsule that contains a firmware logo image. The firmware logo image updater stores the UEFI capsule in a UEFI system partition on a computer-readable storage medium accessible to the computing device. Upon a reboot of the computing device, the FMP is executed. The FMP retrieves the UEFI capsule from the UEFI system partition. The FMP then updates the firmware logo image volume with the firmware logo image stored in the UEFI capsule.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
21.
SYSTEM FOR PROVIDING SELF-DIAGNOSTIC, REMEDY AND REDUNDANCY OF AUTONOMIC MODULES IN A MANAGEMENT MESH AND APPLICATION THEREOF
A system is provided for providing self-diagnostic, remedy and redundancy of autonomic modules in a management mesh. The system defines a plurality of hierarchy clusters and a plurality of families in each hierarchy cluster. Each node of the system is configured as a master node of a corresponding hierarchy cluster or one of a plurality of management nodes of the corresponding hierarchy cluster. Specifically, each management node of the corresponding hierarchy cluster belongs to one family of the corresponding hierarchy cluster. In operation, the master node of the corresponding hierarchy cluster is configured to manage the management nodes of the corresponding hierarchy cluster and communicate with a management application of the system. The system allows automatic addition of new management nodes into a corresponding hierarchy cluster, and provides automation features to perform resource management, remedial actions and redundancy management of the nodes.
A method and a cluster for testing orchestration are provided. The method comprises: assigning a plurality of testing containers each including a specification file to provide testing details and stored in a repository of a control plane, by a testing controller of the control plane, to a plurality of pods each including at least one storage volume configured to store the assigned testing containers; dispatching the plurality of pods, by a scheduler of the control plane through an application program interface (API) server of the control plane, to at least one node; running the plurality of pods, by the at least one node, to execute the assigned testing containers, until all the assigned testing containers stored in the at least one storage volume have been finished; reporting execution results of the finished testing containers to the API server; and if any execution result indicates a failure, assigning the corresponding testing container again to a different pod.
Technologies are described for performing firmware attestation on system reset. When a managed computing system is reset, a baseboard management controller (“BMC”) generates a notification that the managed computing system has been reset and transmits the notification to an event listener executing in a management system by way of an out-of-band (“OOB”) network. The event listener receives the notification that the managed computing system has been reset and, in turn, causes a security manager executing in the management system to transmit a request for firmware attestation data to a platform security agent executing on the managed computing system. The security manager receives the firmware attestation data from the platform security agent by way of an in-band network and stores the firmware attestation data in a database for exposure to other program components for use in evaluating the trustworthiness of the firmware executing on the managed computing system.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
24.
Providing system inventory data from a firmware to a baseboard management controller using an OEM-defined uniform resource identifier
A firmware driver generates a REST Hypertext Transfer Protocol (“HTTP”) request to an original equipment manufacturer (“OEM”)-defined uniform resource identifier (“URI”) for combined inventory data to an interface exposed by a baseboard management controller (“BMC”). The firmware driver receives the combined inventory data from the BMC in response to the request to the OEM-defined URI exposed by the BMC. The firmware driver performs an inventory of the managed computing system to obtain updated inventory data and determines if the updated inventory data and the combined inventory data are identical. If the updated inventory data and the combined inventory data are not identical, the firmware driver generates new combined inventory data for the managed computing system and posts (e.g., by way of a call to an HTTP POST method) the new combined inventory data for the managed computing system to the OEM-defined URI exposed by the BMC.
In an aspect of the disclosure, a method, a computer-readable medium, and a computer system are provided. The computer system includes a BMC. The BMC determines a booting configuration based on setting of the BMC. The BMC determines, from a firmware image and according to the booting configuration, a group of components, of an OS of the BMC, to be loaded into a memory of the BMC. The BMC determines, from the firmware image, storage locations of the group of components. The BMC obtains a first set of components of the group from one or more network locations according to the storage locations.
In an aspect of the disclosure, a method, a computer-readable medium, and a computer system are provided. The computer system includes one or more computing devices. The one or more computing devices provide access to a first firmware image containing firmware of a baseboard management controller (BMC) through a cloud platform. The one or more computing devices receive, from a first device of a first subscriber, a request to retrieve the first firmware image according to a first subscription. The one or more computing devices grant, to the first device, access to the first firmware image.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
27.
Remote configuration of multi-mode DIMMs through firmware
Technologies are described herein for remotely configuring multi-mode dual in-line memory modules (“multi-mode DIMMs”) using a firmware or a baseboard management controller (“BMC”). Technologies are also described for simultaneously initiating multiple commands for configuring multi-mode DIMMs using a BMC and for updating inventory data regarding multi-mode DIMMs stored by a BMC.
In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus is a BMC. The BMC validates a first boot program from an active firmware image based on a hardware component of the BMC. The BMC validates a first boot program from a recovery firmware image based on the hardware component, when the first boot program of the active firmware image is not validated. The BMC executes the first boot program from the recovery firmware image, when the first boot program from the recovery firmware image is validated.
G06F 11/14 - Error detection or correction of the data by redundancy in operation, e.g. by using different operation sequences leading to the same result
In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus is a BMC. The BMC load a data section, from a firmware image into a first memory, containing a first boot program and encrypted with a first private key of a first public key/private key pair. The BMC obtains a first public key, of the first public key/private key pair, that is embedded in a hardware component of the BMC. The BMC validates the data section containing the first boot program based on the first public key.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
G06F 21/54 - Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity, buffer overflow or preventing unwanted data erasure by adding security routines or objects to programs
A container management infrastructure is provided for deployment of management features using a containerized service on a management device and applications thereof are provided. In operation, the infrastructure receives, from a remote computing device, an instruction to select a group of management functionalities. In response, the infrastructure retrieves a corresponding group of the services corresponding to the selected group of management functionalities from a first cloud network, creates a container image using the retrieved group of the services, and deploy the container image to a second cloud network. The second cloud network receives and stores the container image. Upon receiving a request from a remote computing device for the container image, the second cloud network sends the container image to the remote computing device, such that the container image may be executed on the remote computing device to provide a virtual management device thereon.
A system and a method of offloading and migrating management controller functionalities using containerized services are provided. Specifically, a computing device may request a container image from a container management system by sending an instruction to the container management system to select a group of management functionalities to be provided in the container image. In response to receiving the instruction, the container management system retrieves a corresponding group of the services corresponding to the selected group of management functionalities, and creates the container image using the retrieved services. Upon receiving a request from the computing device for the container image, the container management system sends the container image to the computing device, such that the container image may be executed on the computing device to provide a virtual management device thereon. The container image is also capable of being migrated from the computing device to another computing device.
In an aspect of the disclosure, a method, a computer-readable medium, and a BMC are provided. The BMC receives an update package containing one or more updated software components of a firmware image of the BMC. The BMC determines that a first group of components of the one or more updated software components are service components. The BMC creates a first layer on top of existing layers in an overlay file system. The first layer contains the first group of updated software components.
In an aspect of the disclosure, a method, a computer-readable medium, and a BMC are provided. The BMC receives an update package containing one or more updated software components of a firmware image of the BMC to replace corresponding existing software components running on the BMC. The BMC shuts down the existing software components and executes the one or more updated software components. The BMC calculates one or more first stability factors of the one or more updated software components. The BMC compares the one or more first stability factors with one or more second stability factors of the corresponding existing software components. The BMC determines whether to keep the updated software components based on a comparison result.
G06F 11/14 - Error detection or correction of the data by redundancy in operation, e.g. by using different operation sequences leading to the same result
In an aspect of the disclosure, a method, a computer-readable medium, and a computer system are provided. The computer system includes a primary BMC. The primary BMC determines one or more management endpoints that are to be managed by the primary BMC. The primary BMC manages a host and each of the management endpoints manages a respective device serving the host. The primary BMC determines a mapping of communication interfaces between the primary BMC and the one or more management endpoints. The primary BMC determines, based on the mapping, a first communication interface between a first management endpoint and the primary BMC. The primary BMC collects, from the first management endpoint, device operational data of a first device managed by the first management endpoint.
Systems and methods for dynamic sensors support in an Intelligent Platform Management Interface (IPMI) stack. A dynamic sensor monitor task is provided. In operation, the task initiates a plurality of dynamic sensor tables. In a sensor monitor cycle, the task monitors a plurality of sensors to be monitored, in order to get sensor reading information from the sensors. When the task determines that an entity presence sensor event is detected, the task updates a sensor data repository (SDR) and sensor information of at least one dynamic sensor according to the entity presence sensor event, and updates the dynamic sensor tables. Once the sensor monitor cycle is completed and the task determines that the dynamic sensor tables are updated, the task updates the SDR and the sensor information of the at least one dynamic sensor to the IPMI stack based on the updated dynamic sensor tables.
Technologies are described herein for providing a Baseboard Management Controller (“BMC”)-based security processor. The disclosed BMC-based security processor can provide a hardware Root of Trust (“RoT”) for a computing platform without the addition of specialized silicon to the platform and while minimizing the number of attack points. The disclosed BMC-based security processor can also provide functionality for securely filtering requests made on certain buses in a computing platform. Through implementations of the features identified briefly above, and others described herein, various technical benefits can be achieved such as, but not limited to, increased security as compared to previous computing systems that utilize a BMC to provide a hardware RoT and reduced complexity and cost as compared to previous computing systems that utilize a separate hardware device, such as a Field Programmable Gate Array (“FPGA”) or a microcontroller, to provide a hardware RoT.
G06F 21/00 - Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
G06F 13/42 - Bus transfer protocol, e.g. handshakeSynchronisation
G06F 21/53 - Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity, buffer overflow or preventing unwanted data erasure by executing in a restricted environment, e.g. sandbox or secure virtual machine
G06F 21/74 - Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information operating in dual or compartmented mode, i.e. at least one secure mode
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs; downloadable computer programs for systems management; downloadable computer software for interfacing, testing, and controlling computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; computer hardware and downloadable software applications for network attached storage systems, web servers, and embedded environments; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for monitoring error conditions on a computer system, for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer encryption and decryption software; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, projectors, microphones, and peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware Computer software design; computer software design for others; computer software development; design and development of computer software; design and development of computer hardware and software for others; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of computer hardware and software to the specification of others; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs; downloadable computer programs for systems management; downloadable computer software for interfacing, testing, and controlling computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; computer hardware and downloadable software applications for network attached storage systems, web servers, and embedded environments; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for monitoring error conditions on a computer system, for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer encryption and decryption software; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, projectors, microphones, and peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware Computer software design; computer software design for others; computer software development; design and development of computer software; design and development of computer hardware and software for others; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of computer hardware and software to the specification of others; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs for performing computer maintenance; downloadable computer programs for computer systems management; downloadable computer software for interfacing, testing, and controlling computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for monitoring error conditions on a computer system, for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, digital projectors, microphones, and computer peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and reprovision the firmware; Downloadable computer chatbot software for simulating conversations; Downloadable chatbot software for linguistics, support; Downloadable chatbot software using artificial intelligence for linguistics, support Computer software design; computer software design for others; computer software development; design and development of computer software; design and development of computer hardware and software for others; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of computer hardware and software to the specification of others; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware; Providing temporary use of online non-downloadable computer chatbot software for simulating conversations; Providing temporary use of online non-downloadable chatbot software for linguistics, support; Providing temporary use of online non-downloadable chatbot software using artificial intelligence for linguistics, support
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs for performing computer maintenance; downloadable computer programs for computer systems management; downloadable computer software for interfacing, testing, and controlling computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for monitoring error conditions on a computer system, for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, digital projectors, microphones, and computer peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and reprovision the firmware Computer software design; computer software design for others; computer software development; design and development of computer software; design and development of computer hardware and software for others; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of computer hardware and software to the specification of others; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs; downloadable computer programs for systems management; downloadable computer software for interfacing, testing, and controlling computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; computer hardware and downloadable software applications for network attached storage systems, web servers, and embedded environments; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for monitoring error conditions on a computer system, for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer encryption and decryption software; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, projectors, microphones, and peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware Computer software design; computer software design for others; computer software development; design and development of computer software; design and development of computer hardware and software for others; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of computer hardware and software to the specification of others; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs for performing computer maintenance; downloadable computer programs for computer systems management; downloadable computer software for interfacing, testing, and controlling computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for monitoring error conditions on a computer system, for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, digital projectors, microphones, and computer peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and reprovision the firmware Computer software design; computer software design for others; computer software development; design and development of computer software; design and development of computer hardware and software for others; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of computer hardware and software to the specification of others; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs for performing computer maintenance; downloadable computer programs for computer systems management; downloadable computer software for interfacing, testing, and controlling computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for monitoring error conditions on a computer system, for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, digital projectors, microphones, and computer peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and reprovision the firmware Computer software design; computer software design for others; computer software development; design and development of computer software; design and development of computer hardware and software for others; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of computer hardware and software to the specification of others; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs for performing computer maintenance; downloadable computer programs for computer systems management; downloadable computer software for interfacing and testing, computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks, namely, for software for data center management, firmware management, utility management, security management, data collection, predictive analytics and advanced reporting to enable better operational efficiency and reliability for data center infrastructure; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, digital projectors, microphones, and computer peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and reprovision the firmware Computer software design, for software for data center management, firmware management, utility management, security management, data collection, predictive analytics and advanced reporting to enable better operational efficiency and reliability for data center infrastructure; computer software design for others for software for data center management, firmware management, utility management, security management, data collection, predictive analytics and advanced reporting to enable better operational efficiency and reliability for data center infrastructure; computer software development; design and development of computer software for software for data center management, firmware management, utility management, security management, data collection, predictive analytics and advanced reporting to enable better operational efficiency and reliability for data center infrastructure; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of software for software for data center management, firmware management, utility management, security management, data collection, predictive analytics and advanced reporting to enable better operational efficiency and reliability for data center infrastructure; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs for performing computer maintenance; downloadable computer programs for computer systems management; downloadable computer software for interfacing, testing, and controlling computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for monitoring error conditions on a computer system, for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, digital projectors, microphones, and computer peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and reprovision the firmware Computer software design; computer software design for others; computer software development; design and development of computer software; design and development of computer hardware and software for others; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of computer hardware and software to the specification of others; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs for performing computer maintenance; downloadable computer programs for computer systems management; downloadable computer software for interfacing, testing, and controlling computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for monitoring error conditions on a computer system, for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, digital projectors, microphones, and computer peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and reprovision the firmware Computer software design; computer software design for others; computer software development; design and development of computer software; design and development of computer hardware and software for others; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of computer hardware and software to the specification of others; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware
47.
Verifying the integrity of data transmitted between a firmware and a baseboard management controller (BMC)
Technologies are described for verifying the integrity of data transmitted between a firmware and a baseboard management controller (“BMC”). During a first verification phase, a data integrity tool compares system inventory data provided by firmware protocols to a system inventory module to system inventory data in a device instance format. During a second verification phase, the data integrity tool verifies operation of a firmware conversion module by comparing the system inventory data in the device instance format to the system inventory data in a JavaScript Object Notation (“JSON”) format. During a third verification phase, the data integrity tool retrieves the system inventory data from a management server and compares the system inventory data retrieved from the management server to the system inventory data previously transmitted to the management server. Identified discrepancies can be utilized to modify the system inventory module, the firmware conversion module, or the management server.
G06F 9/44 - Arrangements for executing specific programs
G06Q 10/087 - Inventory or stock management, e.g. order filling, procurement or balancing against orders
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
H04L 41/0869 - Validating the configuration within one network element
48.
Remotely disabling execution of firmware components
The components of a firmware that are to be executed are identified, such as firmware device drivers and SMI interrupt handlers. Performance data is also obtained for the components. An inventory identifying the components and the performance data are provided to a BMC. The BMC provides the inventory and the performance data to a remote management client through an out-of-band (“OOB”) network connection. The BMC might also receive a blacklist instruction from the management client. The blacklist instruction provides an indication to the BMC that one or more of the components of the firmware are not to be executed by the computing system. The BMC provides the blacklist instruction to the firmware. The firmware adds the component, or components, identified in the blacklist instruction to a blacklist. The next time the computing system is booted, the firmware will not execute the components identified in the blacklist.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
49.
Remote configuration of multi-mode DIMMs through a baseboard management controller
Technologies are described herein for remotely configuring multi-mode dual in-line memory modules (“multi-mode DIMMs”) using a firmware or a baseboard management controller (“BMC”). Technologies are also described for simultaneously initiating multiple commands for configuring multi-mode DIMMs using a BMC and for updating inventory data regarding multi-mode DIMMs stored by a BMC.
Technologies are described herein for providing a Baseboard Management Controller (“BMC”) -based security processor. The disclosed BMC-based security processor can provide a hardware Root of Trust (“RoT”) for a computing platform without the addition of specialized silicon to the platform and while minimizing the number of attack points. The disclosed BMC-based security processor can also provide functionality for securely filtering requests made on certain buses in a computing platform. Through implementations of the features identified briefly above, and others described herein, various technical benefits can be achieved such as, but not limited to, increased security as compared to previous computing systems that utilize a BMC to provide a hardware RoT and reduced complexity and cost as compared to previous computing systems that utilize a separate hardware device, such as a Field Programmable Gate Array (“FPGA”) or a microcontroller, to provide a hardware RoT.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
G06F 21/74 - Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information operating in dual or compartmented mode, i.e. at least one secure mode
G06F 21/85 - Protecting input, output or interconnection devices interconnection devices, e.g. bus-connected or in-line devices
G06F 9/30 - Arrangements for executing machine instructions, e.g. instruction decode
51.
Firmware update method and computer program product for updating firmware
A firmware update method and computer program product for updating firmware are provided. The method includes: generating a plurality of container files each corresponding to a hardware device among a plurality of hardware devices coupled to a computing system, wherein each container file includes a firmware update utility to be installed on the computing system to update a firmware installed on the corresponding hardware device; generating an image file of the computing system, wherein the image file has a container layer including the plurality of container files; booting the computing system using the image file, wherein the container files are executed consecutively; installing the firmware update utility of each container file on the computing system when each one of the container files is executed; and for each of the hardware devices, installing a firmware image thereon using the corresponding firmware update utility installed on the computing system.
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs for performing computer maintenance; downloadable computer programs for computer systems management; downloadable computer software for interfacing, testing, and controlling computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for monitoring error conditions on a computer system, for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, digital projectors, microphones, and computer peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and reprovision the firmware Computer software design; computer software design for others; computer software development; design and development of computer software; design and development of computer hardware and software for others; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of computer hardware and software to the specification of others; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs for performing computer maintenance; downloadable computer programs for computer systems management; downloadable computer software for interfacing, testing, and controlling computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for monitoring error conditions on a computer system, for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, digital projectors, microphones, and computer peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and reprovision the firmware Computer software design; computer software design for others; computer software development; design and development of computer software; design and development of computer hardware and software for others; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of computer hardware and software to the specification of others; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs for performing computer maintenance; downloadable computer programs for computer systems management; downloadable computer software for interfacing, testing, and controlling computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for monitoring error conditions on a computer system, for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, digital projectors, microphones, and computer peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and reprovision the firmware Computer software design; computer software design for others; computer software development; design and development of computer software; design and development of computer hardware and software for others; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of computer hardware and software to the specification of others; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs for performing computer maintenance; downloadable computer programs for computer systems management; downloadable computer software for interfacing, testing, and controlling computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for monitoring error conditions on a computer system, for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, digital projectors, microphones, and computer peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and reprovision the firmware Computer software design; computer software design for others; computer software development; design and development of computer software; design and development of computer hardware and software for others; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of computer hardware and software to the specification of others; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware
56.
Method for generating a hybrid BMC system and hybrid BMC system
A method for generating a hybrid BMC system and a hybrid BMC system are provided. The method includes: selecting, among a plurality of BMCs, one BMC to be a host BMC; selecting, among the plurality of BMCs, another BMC to be a client BMC, wherein the client BMC uses a first communication protocol different from a second communication protocol used by the host BMC, the client BMC being configured to perform a first task, and the host BMC being configured to perform a second task different from the first task; and configuring an adapter module of the host BMC to interface with the client BMC through the first communication protocol and interface with the host BMC through a second communication protocol such that the host BMC performs the first task through the adapter module.
Technologies are described herein for a representational state transfer (“REST” or “RESTful”) over Intelligent Platform Management Interface (“IPMI”) interface for firmware to baseboard management controller (“BMC”) communication and applications thereof. These applications include, but are not limited to, remote firmware configuration, firmware updates, peripheral device firmware updates, provision of management information such as system inventory data, cloning and batch migration of firmware configuration settings, and firmware integrity monitoring.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
58.
Runtime access to firmware platform configuration data
During boot time of a computing system, a human-readable lookup table is utilized to generate a binary lookup table. At runtime, a hook to a function for reading or setting a firmware variable receives a request in a custom format or a standard format. If the request is in the custom format, the hook locates a mapping identifier (ID) associated with a setup question value to be read or set and a performs a lookup operation in the binary lookup table for the mapping ID. The hook retrieves the offset and bit width associated with the setup question value to be read or set from the binary lookup table. The hook then performs the requested get or set operation using the offset and width for the value and a conventional firmware function for getting or setting a firmware variable.
A firmware enumerates the buses of root bridges in the computing system. If an OOR condition occurs during enumeration of the buses, the firmware determines the number of required buses for each root bridge causing an OOR condition. The number of required buses for bridge devices connected to each root bridge causing an OOR condition can be identified using the same set of bus numbers. Once the firmware has determined the number of buses required by each root bridge, including those not causing an OOR condition, the firmware reallocates the number of available buses between the root bridges such that each root bridge is allocated a number of the available buses greater than or equal to the number of required buses. The firmware stores data identifying the allocation and restarts the computing device. Upon rebooting, the computing system utilizes the new allocation of bus numbers to eliminate the OOR condition.
An automatic installation method is disclosed. The system suitable for a baseboard management controller (BMC) comprises: transmitting a enable remote media and setting an automatic configuration file to a BMC; mounting a share folder from a first server to the BMC; uploading an ISO file from the BMC to the first server, and mounting the ISO file into the share folder; copying the auto installation configuration file to the share folder, and repacking the auto installation configuration file into the ISO file to generate a repacked ISO file; and transmitting the repacked ISO file to the first server.
Technologies are disclosed herein for updating a firmware file system (FFS) file by preserving the original FFS file in its current firmware volume and then storing an updated version of the original FFS file in a firmware volume for updated FFS files. The updated FFS file may be stored in the firmware volume for updated FFS files referenced to the same FFS file identifier as the original FFS file. During boot-up of a system incorporating the updated firmware, the firmware volume for updated FFS files may be accessed to determine if an updated version of any FFS files are present. If updated FFS files are present, then those updated FFS files may be executed, rather than the original FFS files.
Technologies are disclosed herein that allow for utilization of firmware specific data through an Advanced Configuration and Power Interface (ACPI) Firmware Identification (FID) table in a computing system. The ACPI FID table can be loaded during a boot of a computer system. The ACPI FID table can be read after an operating system has been loaded on the computer system. Based upon firmware specific data in the ACPI FID table, functionality provided by the application can be restricted. The use of various features provided by the application can be restricted or the application can be restricted from executing entirely. Compatibility between the application and the firmware can be ensured based upon firmware specific data in the ACPI FID table.
A firmware security vulnerability verification service provides functionality for verifying the presence or absence of security vulnerabilities in firmware source code and firmware. The service can generate a white box testing application to test for the presence of security vulnerabilities using revoke operations on the firmware source code. The white box testing application can report the results of the revoke operations to the service. The service can also generate a black box testing application. The black box testing application can obtain modules for testing the firmware for the presence of security vulnerabilities. The black box testing application can then execute the modules to test the firmware. The results of the black box testing can also be reported back to the network service. The network service can then make the results of the white and black box testing available to a user of the service.
G06F 21/00 - Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
G06F 21/53 - Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity, buffer overflow or preventing unwanted data erasure by executing in a restricted environment, e.g. sandbox or secure virtual machine
G06F 21/51 - Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
G06F 11/36 - Prevention of errors by analysis, debugging or testing of software
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
64.
Updating multi-mode DIMM inventory data maintained by a baseboard management controller
Technologies are described herein for remotely configuring multi-mode dual in-line memory modules (“multi-mode DIMMs”) using a firmware or a baseboard management controller (“BMC”). Technologies are also described for simultaneously initiating multiple commands for configuring multi-mode DIMMs using a BMC and for updating inventory data regarding multi-mode DIMMs stored by a BMC.
A firmware settings data structure and a settings mapping table for a first firmware are stored in a non-volatile memory. A second firmware settings data structure and a second settings mapping table for a second firmware are also stored. An entry is selected in the second firmware settings mapping table. A search is made of the first settings mapping table for an entry having an identifier that is the same as an identifier in the selected entry in the second firmware settings mapping table. If a matching entry is located, a value in the first firmware settings data structure identified by the entry in the first firmware settings mapping table is copied to the second firmware settings data structure. If a matching entry is not found in the first firmware settings data structure, a default value for the firmware setting is stored in the second firmware settings data structure.
H04L 9/06 - Arrangements for secret or secure communicationsNetwork security protocols the encryption apparatus using shift registers or memories for blockwise coding, e.g. D.E.S. systems
Control of a prompt for a credential to unlock a computer-readable storage device is provided. Some embodiments permit identifying a component that encrypted the computer-readable storage device and, depending on the identified component, prompting for such a credential. One embodiment can determine that a firmware encrypted the computer-readable storage device and can prompt for a password, for example, to unlock the computer-readable storage device during a boot-up process performed by the firmware. Other embodiments can determine that an operating system encrypted the computer-readable storage device, and can avoid the presentation of a prompt for a password, for example, during a boot-up process performed by the firmware. The computer-readable storage device can be a self-encrypting drive (SED) or another type of disk drive.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
G06F 21/62 - Protecting access to data via a platform, e.g. using keys or access control rules
G06F 12/14 - Protection against unauthorised use of memory
G06F 21/78 - Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
67.
Accessing files stored in a firmware volume from a pre-boot application
Standard I/O library functions for accessing files stored on mass storage devices are modified to enable access to files stored in firmware volumes. An application can be compiled against the modified standard I/O library functions to generate a pre-boot application. When the pre-boot application is executed within a pre-boot execution environment, it can utilize standard I/O library functions to access files stored in a firmware volume. In response to receiving a request to open a file from a pre-boot application, the called I/O function searches a file cross-reference table to locate the filename for the file. If the filename is in the file cross-reference table, the GUID associated with the filename is retrieved from the file cross-reference table and used to obtain a file handle to the file. The file handle can then be returned to the pre-boot application and used to perform other types of operations on the file.
Technologies are described herein for remotely configuring multi-mode dual in-line memory modules (“multi-mode DIMMs”) using a firmware or a baseboard management controller (“BMC”). Technologies are also described for simultaneously initiating multiple commands for configuring multi-mode DIMMs using a BMC and for updating inventory data regarding multi-mode DIMMs stored by a BMC.
09 - Scientific and electric apparatus and instruments
42 - Scientific, technological and industrial services, research and design
Goods & Services
Downloadable computer program for diagnosing computer hardware in the nature of conducting diagnostics between operating system and peripheral devices and conducting comprehensive testing for all system components; downloadable computer software in the nature of an interface between operating system and peripheral devices; downloadable computer software and firmware for computing systems in the nature of an interface between operating system and peripheral devices; Integrated circuits; computer hardware; computer integrated circuits; motherboards; downloadable operating software for motherboards; downloadable BIOS (basic input output system) computer programs; downloadable computer operating programs and computer operating systems; downloadable computer software development tools; downloadable computer utility programs; downloadable computer programs for systems management; downloadable computer software for interfacing, testing, and controlling computer compatible hardware and peripherals; downloadable computer software in the nature of an interface between an operating system and peripheral devices; downloadable computer programs and computer circuitry for interface management between a computer and data entry apparatus; computer hardware and downloadable software used for diagnosing problems with other computer hardware and software; downloadable computer software based on a third party platform framework for Extensible Firmware Interface (EFI) for enabling and developing firmware; computer hardware and downloadable software for backup, data storage, and file management; downloadable computer software for the transfer of data over computer networks; computer hardware-based remote server management controllers, namely, peripheral component interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; computer hardware and downloadable software applications for network attached storage systems, web servers, and embedded environments; downloadable computer software program used for connecting computer peripherals to universal serial bus-equipped computers and mobile devices; downloadable computer program incorporating a graphical user interface used for monitoring error conditions on a computer system, for reporting events and failures associated with error conditions on a computer system, and for making entries in a computer system log regarding error conditions on a computer system; communications servers; downloadable communications software for connecting computer network users and for connecting global computer networks; computer hardware and downloadable software for setting up and configuring local area network; computer hardware and downloadable software for setting up and configuring wide area networks; computer hardware for communicating audio, video and data between computers via a global computer network, wide-area computer networks, and peer-to-peer computer networks; downloadable computer programs for connecting remotely to computers or computer networks; downloadable computer programs for the enabling of access or entrance control; downloadable computer software for communicating with users of hand-held computers; downloadable computer software for computer system and application development, deployment, and management; downloadable computer software for controlling and managing access server applications; downloadable computer encryption and decryption software; downloadable computer software for use in the encryption and decryption of digital files, including audio, video, text, binary, still images, graphics and multimedia files; downloadable computer software for the creation of firewalls; downloadable computer software, namely, software development tools for the creation of mobile internet applications and client interfaces; downloadable computer software that allows users to sync email, contacts, and other digital and multimedia content from a desktop computer to a mobile device; computer hardware, downloadable computer software, electronic sensor devices, cameras, projectors, microphones, and peripherals used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; downloadable computer software used for capturing gesture, facial, and voice recognition for the touchless control of computers, phones and other communications devices, and other multimedia devices; Hardware-based remote server management controllers, namely, Peripheral Component Interface (PCI) plug-in cards for use in monitoring and reporting system wide status and fault conditions, and downloadable software for use in operating assistant server controllers used in the field of computer software engineering; downloadable computer software based on a third party platform framework for Extensible Firmware Interface for enabling and developing firmware; downloadable computer software for interfacing and testing computer compatible hardware; downloadable computer software and firmware for operating system programs; Downloadable computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware Computer software design; computer software design for others; computer software development; design and development of computer software; design and development of computer hardware and software for others; computer software installation and maintenance; debugging computer software for others; custom design services, namely, custom design of computer hardware and software to the specification of others; design and development of computer firmware; Engineering design services; computer platform installation and maintenance services, namely, computer platform validation and testing services; computer security services, namely, providing computer platform security, secure boot, and secure firmware signing, through providing online, non-downloadable software with hardware security modules to execute cryptographic tasks for user authentication, code authentication, and performance monitoring; monitoring of computer systems by remote access; administering digital keys; design and development of computer software and firmware that can detect and protect against firmware attacks, recover and re-provision the firmware
70.
Generation of a firmware configured for use in restricting the use of a firmware tool
Technologies are provided for generation of firmware configured to restrict use of a firmware tool. Some embodiments include a computing system that can obtain firmware source code comprising a module configured to copy contents of a digitally signed binary file to an advanced configuration and power management interface (ACPI) table at runtime of a firmware. The computing system can generate a firmware image of the firmware, the firmware image comprising the module, a first firmware globally unique identifier (GUID), and a defined area storing digital content that remains unchanged upon a change to the firmware. The computing system also can obtain a binary file comprising a second firmware GUID, a firmware tool GUID, and a feature GUID, and can digitally sign the binary file using a private encryption key to generate the digitally signed binary file. The computing system can store the digitally signed binary file within the defined area.
G06F 21/00 - Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
G06F 21/62 - Protecting access to data via a platform, e.g. using keys or access control rules
H04L 9/32 - Arrangements for secret or secure communicationsNetwork security protocols including means for verifying the identity or authority of a user of the system
71.
Automated identification and disablement of system devices in a computing system
Technologies are provided for automated identification of system devices to be disabled in a computing system and the disablement of the system devices during bootup of the computing system. In some embodiments, the computing system can execute a firmware configured to perform a bootup process of the computing system. The computing system includes multiple system devices. The firmware can generate program code for identifying a system device for disablement. The firmware can send the program code to a controller device curing the bootup process, where execution of the program code by the controller device generates data identifying one or several specific system devices to be disabled in the computing system. The firmware can then access such data from the controller device. Using the data, the firmware can determine that a specific system device to be disabled. The firmware can then disable that particular system device on a next bootup process.
In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a pod manager. The pod manager receives receive a request for composing a target composed-node. The pod manager employs a first set of pooled hardware resources of the computing pod to build the target composed-node. The pod manager determines to reserve a second set of pooled hardware resources of the computing pod for a backup node of the target composed-node. The pod manager determines that the target composed-node has failed. The pod manager employs the second set of pooled hardware resources to build the backup node.
G06F 9/50 - Allocation of resources, e.g. of the central processing unit [CPU]
G06F 11/14 - Error detection or correction of the data by redundancy in operation, e.g. by using different operation sequences leading to the same result
A computing device includes a processor, a volatile memory, and a non-volatile memory. The computing device receives a firmware update that includes updated firmware runtime components, such as updated runtime interrupt handlers (e.g. SMI handlers). The computing device stores the updated firmware runtime components in the volatile memory (e.g. RAM) of the device. The computing device also causes the updated firmware runtime components stored in the volatile memory to be used during the runtime of the computing device instead of one or more other firmware runtime components previously stored in the volatile memory. For example, the contents of one or more interrupt routing tables can be adjusted such that updated runtime interrupt handlers stored in volatile memory are used instead of previously installed and potentially insecure runtime interrupt handlers. On a subsequent reboot of the computing device, updated firmware runtime components stored in the non-volatile memory will be utilized.
Technologies are disclosed for identifying firmware functions that were executed in a call chain prior to the occurrence of an error condition, such as an assert or an exception. In particular, a search is made from an instruction pointer (“IP”) for a memory address containing a signature identifying a firmware module. The firmware module that includes a function that generated the error condition can be identified based on the memory address. The name of the function that generated the error condition can be identified using a function mapping file. Previous functions in the same call chain are identified and their names determined using the function mapping file. Output can then be generated that includes the name of the firmware module that includes the function that generated the error condition, the name of the function that generated the error condition, and the names of other functions in the same call chain.
Technologies are disclosed herein for identifying and resolving firmware component dependencies within a firmware project. Dependency information is generated and stored for firmware components that can be used to create a firmware project. The dependency information may define one or more mandatory dependencies, optional dependencies, and/or incompatible dependencies. The dependency information for the firmware components in the firmware project is evaluated to identify any unsatisfied dependencies when a firmware project is opened, when a firmware component is added to a firmware project, when a firmware component in a firmware project is updated, or when the firmware project is built. If any unsatisfied dependencies are identified, the dependencies can be satisfied by adding a firmware component to the firmware project, updating a firmware component in the firmware project, or by removing a firmware component from the firmware project.
A server deployment method and system in a hypervisor architecture are disclosed. The server deployment method, applied between a deployment management platform and at least one deployed server, includes steps of: (a) the deployed server requesting an internet protocol (IP); (b) the deployment management platform distributing the IP; (c) the deployed server requesting an agent; (d) the deployment management platform delivering the agent; (e) the deployed server automatically joining the deployment management platform; (f) the deployment management platform mounting a hard disk shared by the deployed server; (g) the deployment management platform selecting the type of central processing unit (CPU) and installing an operating system to the hard disk shared by the deployed server; and (h) establishing a connection of a monitor screen between the deployment management platform and the deployed server.
Technologies are described herein for a representational state transfer (“REST” or “RESTful”) over Intelligent Platform Management Interface (“IPMI”) interface for firmware to BMC communication and applications thereof. These applications include, but are not limited to, remote firmware configuration, firmware updates, peripheral device firmware updates, provision of management information such as system inventory data, cloning and batch migration of firmware configuration settings, and firmware integrity monitoring. This functionality can be provided in a way that enables communication between BMCs and firmware to utilize modern manageability interfaces while maintaining backward compatibility with previous IPMI implementations.
G06F 13/36 - Handling requests for interconnection or transfer for access to common bus or bus system
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
78.
System and method for updating files through a peer-to-peer network
A system and a method for updating files through a peer-to-peer (P2P) network are provided. The system includes a plurality of device nodes, and a link manager. The device nodes are distributed in a peer-to-peer network and respectively have baseboard management controllers (BMCs). The link manager connects to the peer-to-peer network via a management network and includes an update engine. The device nodes include at least a first device node, a second device node and a third device node. The link manager sends an update command to the peer-to-peer network. The update engine arranges a first update from the first device node to the second device node, and arranges a second update from the second device node to the third device node.
A method, a baseboard management controller (BMC) and a system for establishing a serial-over-LAN connection are provided. The method includes: receiving data from a server unit using the first UART at a current baud rate; detecting the current baud rate of the first UART using the BMC; configuring the baud rate of the second UART of the BMC as the current baud rate; controlling the second UART to retrieve the data from the first UART at the current baud rate using the BMC; and sending the data to a network using the BMC.
Technologies are disclosed herein that allow for utilization of firmware specific data through an Advanced Configuration and Power Interface (ACPI) Firmware Identification (FID) table in a computing system. The ACPI FID table can be loaded during a boot of a computer system. The ACPI FID table can be read after an operating system has been loaded on the computer system. Based upon firmware specific data in the ACPI FID table, functionality provided by the application can be restricted. The use of various features provided by the application can be restricted or the application can be restricted from executing entirely. Compatibility between the application and the firmware can be ensured based upon firmware specific data in the ACPI FID table.
Technologies are disclosed herein that allow for utilization of memory channel storage (“MCS”) devices in a computing system. The MCS device may be detected during a boot phase of the computing system, and the address data for the MCS device may be detected through repeated manipulation of a logical offset. The address data may then be stored for later use in memory allocation.
Debug trace statements from a firmware are captured during a boot cycle of a computer executing the firmware. The debug trace statements are written to a motherboard's Serial Peripheral Interface (“SPI”) device. A microcontroller's SPI device receives the debug trace statements from the motherboard's SPI device, transforms the data format of the debug trace statements, and transmits the transformed debug trace statements over a serial communications port of the microcontroller.
Non-destructive update of discrete firmware components of a firmware is provided. During a boot-up process, the availability of an update for the firmware can be determined prior to execution thereof. To that end, a controller device can be queried for availability of the update and, when the update is available, a processor that executes the firmware as part of the boot-up process can retrieve an updated version of one or more components of the firmware from a virtual drive device provided by the controller device. The processor can retain such component(s) in a main memory device. The processor can then execute the component(s) from the main memory and can execute other non-updated component(s) of the firmware from a non-volatile memory device that retains the firmware. Therefore, the firmware can be updated during the boot-up process, without changing the contents of the non-volatile memory device.
A method for firmware debug trace capture includes creating a hand-off block (“HOB”), capturing first debug trace statements during a boot sequence of a computer and writing the first debug trace statements to the HOB. A trace memory buffer can be created and the first debug trace statements can be copied from the HOB to the trace memory buffer. Second debug trace statements are captured during the boot sequence and appended to the trace memory buffer. In some configurations, the first debug trace statements can be written to the HOB during the pre-Extensible Firmware Interface initialization (“PEI”) phase of the boot sequence and the second debug trace statements can be written to the trace memory buffer during the driver execution (“DXE”) phase of the boot sequence.
Technologies are disclosed herein for utilizing near field communication (“NFC”) to improve the security, performance, and configuration of computing systems. In particular, NFC can be utilized to power an NFC-equipped server computer on or off, to log directly into an operating system executing on the NFC-equipped server computer, to stream firmware debugging data from an NFC-equipped server computer to an NFC-equipped mobile device, to initiate the update or recovery of firmware, to provide hardware inventory data, or to pair hardware devices. Firmware debugging data can also be streamed from a firmware to an NFC-equipped mobile device. NFC can also be utilized to disable functionality provided by a mobile device while the device is in motion, such as when a user of the mobile device is operating a motor vehicle.
H04W 4/80 - Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
Technologies are described herein for a representational state transfer (“REST” or “RESTful”) over IPMI interface for firmware to BMC communication and applications thereof. These applications include, but are not limited to, remote firmware configuration, firmware updates, peripheral device firmware updates, provision of management information such as system inventory data, cloning and batch migration of firmware configuration settings, and firmware integrity monitoring. This functionality can be provided in a way that enables communication between BMCs and firmware to utilize modern manageability interfaces while maintaining backward compatibility with previous IPMI implementations.
G06F 13/36 - Handling requests for interconnection or transfer for access to common bus or bus system
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
Technologies are described herein for a representational state transfer (“REST” or “RESTful”) over IPMI interface for firmware to BMC communication and applications thereof. These applications include, but are not limited to, remote firmware configuration, firmware updates, peripheral device firmware updates, provision of management information such as system inventory data, cloning and batch migration of firmware configuration settings, and firmware integrity monitoring. This functionality can be provided in a way that enables communication between BMCs and firmware to utilize modern manageability interfaces while maintaining backward compatibility with previous IPMI implementations.
G06F 13/36 - Handling requests for interconnection or transfer for access to common bus or bus system
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
A monitoring system may include a sensor configured to be mounted inside a computer chassis and generate sensor signals representative of a temperature associated with at least one computer component inside the computer chassis. The monitoring system may also include a sensor processor configured to receive the sensor signals and determine the temperature associated with the at least one computer component based at least in part on the sensor signals. The sensor processor may also be configured to compare the determined temperature with an expected temperature associated with the at least one computer component, and initiate a response when the determined temperature differs from the expected temperature by an amount equal to or greater than a threshold amount.
Technologies are disclosed herein for saving data, such as state data, during boot-up of a computer system, such that that data may be retrieved at a later time and restored to its original locations. The data that is stored may be from a shared partition of system memory that is accessible by both firmware services and runtime services, as enabled by an operating system and/or applications running on the computer system. The data may be stored in a partition of the system memory that is only accessible by firmware. In some embodiments, due to the data of the shared partition of the system memory being restored, some functions of the boot-up may not be repeated prior to loading a second operating system on the computer system.
A firmware can include multiple features for multiple users enabled based on the presence of authenticated variables. When attempting to access functionality of a feature, the firmware will check for the presence of an authenticated variable corresponding to the feature. The authenticated variable for the feature may be installed by a user. The firmware may data to enable a feature that includes an authenticated variable for enabling the feature and an authenticated variable corresponding to an end-user of the firmware. If the firmware has access to the end-user authenticated variable, the feature authenticated variable is installed.
A firmware attempts to allocate memory address resources, such as memory addresses in a PCI I/O and a PCI memory address space, to bus devices in a multi-processor computing system. If an out-of-resource (OOR) condition occurs during allocation of the memory address resources, memory address resources can be re-allocated from stacks that were successfully allocated requested resources to stacks that were not successfully allocated requested resources. Memory address resources can also, or alternately, be re-allocated from sockets that were successfully allocated requested resources to sockets that were not successfully allocated requested resources. If stack-level or socket-level readjustment of the memory address resource allocation fails, a base memory address of a configuration memory address space can be lowered, and the allocation can be retried. A pre-defined memory address resource allocation table can also be utilized to allocate the memory address resources following failure of the stack-level and socket-level allocation readjustment.
A management server exposes a web services interface through which managed clients that are not equipped with baseboard management controllers (“BMCs”) can submit management data at boot time. The firmware of the managed clients can receive management commands from the management server during boot time. The management server can also expose a web services interface to management clients through which the management clients can obtain the management data provided by the managed clients as if the management data were being provided through a BMC. The management server can also receive management commands from the management client computers for performance at the managed client computers. The management server queues the management commands for provision to the appropriate managed clients during the next boot of the managed clients.
A password protection module is added to a BIOS firmware initialization routine to lock a password protected device on a warm reset. The password protection module sets one or more variables associated with the operation of a password protected device. The variables enable password protection for the password protected device and enable a shift from an unlocked state to a locked state upon a warm reset.
G06F 15/177 - Initialisation or configuration control
G06F 9/00 - Arrangements for program control, e.g. control units
G06F 21/78 - Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
An external M.2 solid-state drive dock with local and network interfaces is disclosed. The dock includes an enclosure with apertures through which M.2 solid-state drives can be received. A circuit board is mounted within the enclosure that includes M.2 socket connectors for receiving the M.2 solid-state drives. The circuit board also includes a storage controller coupled to the M.2. socket connectors. A local interface controller is coupled to the storage controller for providing a local interface, such as a USB-C interface, to the M.2 solid-state drives to host computers. A network controller is also coupled to the storage controller for providing network interfaces, such as wired and/or wireless network interfaces, for accessing the M.2. solid-state drives. The storage controller can receive storage requests from the local interface controller and the network interface controller and provide the storage requests to the M.2 solid-state drives.
Technologies are disclosed herein for near field communication (“NFC”) enhanced firmware security. Using an implementation of the technologies disclosed herein, an NFC card or an NFC-equipped mobile device can be utilized to access an NFC-equipped server computer. The server computer reads a login key from an NFC card or an NFC-equipped mobile device. Based upon the login key, a firmware executing on the server computer can determine whether a user is to have administrator access rights, non-administrator user access rights, or no access rights at all to a firmware setup menu provided by the server computer. Based upon the login key, the firmware executing in the NFC-equipped server computer can also identify an operating system to be booted by the server computer. In some configurations, an NFC-equipped mobile device contacts an authorization server to obtain the login key based upon a user's access credentials.
G06F 21/35 - User authentication involving the use of external additional devices, e.g. dongles or smart cards communicating wirelessly
G06F 21/62 - Protecting access to data via a platform, e.g. using keys or access control rules
H04W 4/80 - Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
H04W 4/02 - Services making use of location information
96.
Identifying an remediating correctable hardware errors
Technologies are disclosed for identifying and remediating correctable hardware errors. A firmware can detect a system management interrupt (“SMI”) generated by a hardware device responsive to the occurrence of a correctable error. Once the firmware has identified the device that generated the SMI, the firmware can determine whether an earliest recorded error generated by the identified device is longer ago than a threshold amount of time. If the earliest recorded error generated by the device is not longer ago than the threshold amount of time, the firmware can increment an error count for the device. The firmware can also determine whether the error count for the device exceeds a threshold. If the error count for the device exceeds the threshold, the firmware can generate an error notification for the device. The firmware can also implement a remedial action policy for the device.
G06F 11/07 - Responding to the occurrence of a fault, e.g. fault tolerance
G06F 11/14 - Error detection or correction of the data by redundancy in operation, e.g. by using different operation sequences leading to the same result
G06F 13/42 - Bus transfer protocol, e.g. handshakeSynchronisation
97.
Rest over IPMI interface for firmware to BMC communication
Technologies are described herein for a representational state transfer (“REST” or “RESTful”) over an Intelligent Platform Management Interface (“IPMI”) interface for firmware to a baseboard management controller (“BMC”) communication and applications thereof. These applications include, but are not limited to, remote firmware configuration, firmware updates, peripheral device firmware updates, provision of management information such as system inventory data, cloning and batch migration of firmware configuration settings, and firmware integrity monitoring. This functionality can be provided in a way that enables communication between BMCs and firmware to utilize modern manageability interfaces while maintaining backward compatibility with previous IPMI implementations.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
98.
Option ROM dispatch policy configuration interface
A computer-implemented method renders user interfaces for devices with multi-image option ROMs according to option ROM dispatch policies associated with the devices. The option ROM dispatch policies can specify whether the multi-image option ROM for the device is enabled or disabled. The option ROM dispatch policies can also specify the image of the multi-image option ROM to execute during boot. The multi-image ROM can include a UEFI compliant image and a legacy BIOS image. The computer-implemented method may receive user selections modifying the option ROM dispatch policies via the rendered user interfaces.
A firmware, such as a unified extensible firmware interface (UEFI)-compliant firmware, provides a network protocol stack in a pre-boot execution environment. A network layer in the network protocol stack receives network packets. A firmware driver executing in the network layer determines whether individual network packets received at the network layer meet one or more pre-defined criteria. If individual network packets meet the pre-defined criteria, the firmware driver provides the network packets to a transport layer in the network protocol stack. If, however, the network packets received at the network layer do not meet the pre-defined criteria, the firmware driver discards the individual network packets.
Firmware interfaces scale a fixed-font utilized by the firmware interfaces to display glyphs of the fixed-font at a native resolution or a preferred resolution of a display. A conversion factor is generated for scaling the glyphs of the font using the native resolution or the preferred resolution. The glyphs may be scaled using the conversion factor. The scaled glyphs may be stored and utilized to display text of the firmware interface in the native resolution or the preferred resolution.
