《使用 eSFI 和 PCIe-MI 管理和保护您的 PCIe 基础架构.pdf》由会员分享,可在线阅读,更多相关《使用 eSFI 和 PCIe-MI 管理和保护您的 PCIe 基础架构.pdf(20页珍藏版)》请在三个皮匠报告上搜索。
1、Paul Kaler,Storage&Security Futures Architect,HPEAustin Bolen,Server Engineering,Dell TechnologiesManage and Secure your PCIe Infrastructure using eSFI and PCIe-MIPaul Kaler,Storage&Security Futures Architect,HPEAustin Bolen,Server Engineering,Dell TechnologiesManage and Secure your PCIe Infrastruct
2、ure using eSFI and PCIe-MIHARDWARE MANAGEMENTPCIe Management Interface(PCIe-MI)Standards-based BMC interface to perform PCIe-specific management operationsEnables BMCs to perform PCIe initialization(e.g.,reading/writing configuration space)Enhanced System Firmware Intermediary(eSFI)Standards-based B
3、MC interface to control visibility of PCIe components to an in-band hostEnables BMCs to initialize PCIe components prior to exposing to an in-band hostEnhances Downstream Port traffic filtering to enable only out-of-band trafficOverviewGeneric management operations already covered by Platform Level
4、Data Model(PLDM)Sensor monitoring(e.g.,temperature),firmware update,etc.Security already covered by Security Protocol and Data Model(SPDM)Measurement,authentication,secure sessions,authorization,etc.Device specific management already covered by protocols such as:NC-SI for network controllersNVMe-MI
5、for NVMe devicesCCI for CXL type 3 memory devicesPCIe-MI enables a standard management protocol across PCIe device types for PCIe-specific operationsPCIe Configuration Space accessGetting/Setting link subdivisionsGetting/Setting clocking modesMotivation for PCIe Architected OOB ManagementCover Gaps
6、Not Handled by Existing OOB Management StandardsEliminate duplication of effortPCIe-specific functionality is often duplicated for each PCIe device typeReduce vendor-specific implementations to ease adoption.Eliminate the need for proprietary in-band management toolsSystem vendor-developed managemen