Secure firmware deployment
    1.
    发明授权

    公开(公告)号:US10860305B1

    公开(公告)日:2020-12-08

    申请号:US15721307

    申请日:2017-09-29

    摘要: A server includes a motherboard and a programmable logic device coupled to the motherboard. The server also includes a hardware device coupled to the motherboard and the programmable logic device. The server further includes a non-volatile memory storing firmware for the hardware device. The non-volatile memory is coupled to the motherboard and the programmable logic device. The server further includes a peripheral device coupled to the motherboard and the programmable logic device. The peripheral device receives firmware data from a management server. The peripheral device verifies that the firmware data corresponds to the hardware device. The peripheral device further holds the hardware device in reset mode. The peripheral device stores the firmware data on the non-volatile memory to update the firmware and releases the hardware device from reset mode after updating the firmware.

    Cable-based configuration
    2.
    发明授权

    公开(公告)号:US10067894B1

    公开(公告)日:2018-09-04

    申请号:US14830423

    申请日:2015-08-19

    摘要: The following description is directed to cable-based configuration. In one example, a method can include determining a first end of a cable is connected to a first device and a second end of the cable is connected to a second device. The first device can be configured to perform a first function when it is determined the first end of the cable is connected to the first device. The second device can be configured to perform a second function when it is determined the second end of the cable is connected to the second device. The second function can be different from the first function, such that the first device and the second device are configured differently based on which end of the cable is connected to the respective device.

    SECURE EXECUTION ENVIRONMENT ON A SERVER
    3.
    发明申请

    公开(公告)号:US20180165455A1

    公开(公告)日:2018-06-14

    申请号:US15377991

    申请日:2016-12-13

    IPC分类号: G06F21/57 G06F9/44 G06F21/44

    摘要: Disclosed herein are techniques for maintaining a secure execution environment on a server. In one embodiment, the server includes a non-volatile memory storing firmware, a programmable security logic coupled to the non-volatile memory, an adapter device coupled to the programmable security logic, and a processor communicatively coupled to the non-volatile memory via the programmable security logic. The adapter device and/or the programmable security logic can verify the firmware in the non-volatile memory while holding the processor and/or a baseboard management controller (BMC) in power reset, release the processor and the BMC from reset to boot the processor and the BMC after the firmware is verified, and then disable communications between the processor and the BMC and deny at least some requests to write to the non-volatile memory by the processor or the BMC.

    Secure environment on a server
    5.
    发明授权

    公开(公告)号:US10911405B1

    公开(公告)日:2021-02-02

    申请号:US15824896

    申请日:2017-11-28

    摘要: Disclosed herein are techniques for maintaining a secure environment on a server. In one embodiment, the server includes a baseboard management controller (BMC), a first Ethernet port coupled with an adapter device network comprising a plurality of adapter devices, and a master adapter device including a second Ethernet port and a network switch, the network switch being controllable to be selectively coupled with at least one of the BMC, the first Ethernet port, or the second Ethernet port. The master adapter device may receive a network packet from at least one of: the first Ethernet port, the second Ethernet port, or the BMC, and determine, based on a forwarding policy, whether to forward the network packet. Based on a determination to forward the network packet, the master adapter device may determine a destination, and control the network switch to transmit the network packet to the destination.

    Secure execution environment on a server

    公开(公告)号:US10691803B2

    公开(公告)日:2020-06-23

    申请号:US15377991

    申请日:2016-12-13

    摘要: Disclosed herein are techniques for maintaining a secure execution environment on a server. In one embodiment, the server includes a non-volatile memory storing firmware, a programmable security logic coupled to the non-volatile memory, an adapter device coupled to the programmable security logic, and a processor communicatively coupled to the non-volatile memory via the programmable security logic. The adapter device and/or the programmable security logic can verify the firmware in the non-volatile memory while holding the processor and/or a baseboard management controller (BMC) in power reset, release the processor and the BMC from reset to boot the processor and the BMC after the firmware is verified, and then disable communications between the processor and the BMC and deny at least some requests to write to the non-volatile memory by the processor or the BMC.

    Device diagnosis
    8.
    发明授权

    公开(公告)号:US10929261B1

    公开(公告)日:2021-02-23

    申请号:US16017736

    申请日:2018-06-25

    IPC分类号: G06F11/26 G06Q30/00 H04L29/08

    摘要: A technology is described for a device diagnosis station. The device diagnosis station may be configured to identify an electronic device physically connected to the device diagnosis station, evaluate an operational state of the electronic device by executing testing instructions configured to test the functionality of the electronic device and collect operational state information for the electronic device. The device diagnosis station may be configured to determine the operational state of the electronic device and execute recovery instructions to restore the electronic device to an improved state when a recoverable error is detected. The device diagnosis station may be configured to initiate a device return procedure for the electronic device when a non-recoverable error state is detected.