# US 12,602,487 B2 · Vulnerability proofing of an edge compute endpoint while onboarding to an edge orchestrator

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,602,487 B2
- Document ID: US12602487B2
- Status: Granted
- Kind: B2
- Application number: 18/426,429
- Filed: 2024-01-30
- Published: 2025-07-31
- Granted: 2026-04-14
- Earliest claimed: 2024-01-30
- Assignees: Dell Products L.P.
- Applicants: Dell Products L.P.
- Inventors: Raveendra Babu Madala; Santosh Gore; Parmeshwr Prasad
- Web page: https://patentgrep.com/patent/US12602487B2

## CPC

- G06F 21/577: {Assessing vulnerabilities and evaluating computer system security}
- G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Vulnerability proofing of an edge compute endpoint while onboarding to an edge orchestrator includes detecting onboarding of and Information Handling System (IHS) as the edge compute endpoint to the edge orchestrator that includes vulnerability management service instructions. The onboarding includes configuring for (a) hardware component(s) of the IHS. Execution of the vulnerability management service instructions results in accessing (a) catalog(s) specifying known vulnerabilities of hardware components of the IHS, determining whether any of the configuring of the configuration(s) for the hardware component(s) are identified as vulnerable in the catalog(s), and blocking of the onboarding of the IHS as the edge compute endpoint to the edge orchestrator until the configuring of the hardware component(s) is modified to include no configuring of the hardware component(s) with vulnerabilities identified in the catalog(s).

## Claims

### Claim 1

An Information Handling System (IHS) comprising:
one or more CPUs utilizing one or more buses that connect to a plurality of hardware components of the IHS; and
a remote access controller supporting remote management of the Information Handling System (IHS), the remote access controller comprising a logic unit and a memory device having instructions stored thereon that, upon execution by the logic unit, cause the remote access controller to:
detect start of onboarding of the IHS as an edge compute endpoint to an edge orchestrator comprising vulnerability management service instructions; and
execute the vulnerability management service instructions, which causes the remote access controller to:
identify configurations for one or more of the plurality of hardware components of the IHS in onboarding of the IHS as the edge compute endpoint to the edge orchestrator;
access a plurality of catalogs specifying known vulnerabilities of hardware components;
determine whether any of the one or more of the hardware component configurations in the onboarding of the IHS as the edge compute endpoint to the edge orchestrator are identified as vulnerable in one or more of the catalogs; and
block use of the onboarding of the IHS as the edge compute endpoint to the edge orchestrator by the IHS until the hardware component configurations within the onboarding of the IHS as the edge compute endpoint to the edge orchestrator are modified to include no configurations with vulnerabilities identified in the plurality of catalogs.

### Claim 2 (depends on 1)

The IHS of claim 1, wherein the plurality of catalogs comprise a catalog of hardware component vulnerabilities known to a manufacturer of the IHS.

### Claim 3 (depends on 2)

The IHS of claim 2, wherein the plurality of catalogs comprise a catalog of hardware component vulnerabilities known to a manufacturer of one or more of the plurality of hardware components of the IHS.

### Claim 4 (depends on 1)

The IHS of claim 1, wherein execution of the vulnerability management service instructions further causes the remote access controller to identify, within a factory provisioned identity certificate of the IHS, one or more vulnerability proofing requirements for the IHS.

### Claim 5 (depends on 4)

The IHS of claim 4, wherein the factory-provisioned identity certificate comprises digital signatures for authenticating instructions used by one or more of the hardware components of the IHS.

### Claim 6 (depends on 4)

The IHS of claim 4, wherein the vulnerability proofing requirements in the inventory certificate further specify the plurality of catalogs of known vulnerabilities for use in identifying hardware component configurations that are vulnerable.

### Claim 7 (depends on 1)

The IHS of claim 1, wherein execution of the instructions further causes the remote access controller to notify an administrator for each blocked onboarding of the IHS as the edge compute endpoint to the edge orchestrator due to configurations with vulnerabilities.

### Claim 8 (depends on 1)

The IHS of claim 1, wherein execution of the vulnerability management service instructions further causes the remote access controller to detect the start of onboarding of the IHS as the edge compute endpoint to the edge orchestrator by the edge orchestrator discovering or detecting the edge compute endpoint upon the edge compute endpoint being connected to a switch that connects to the edge orchestrator.

### Claim 9

A method for vulnerability proofing an Information Handling System (IHS) while onboarding the IHS to an edge orchestrator as an edge compute endpoint, the vulnerability proofing implemented by a remote access controller of the IHS that provides remote management of the IHS, the method comprising:
detecting onboarding of the IHS as the edge compute endpoint to the edge orchestrator comprising vulnerability management service instructions, the onboarding comprising configuring for one or more of a plurality of hardware components of the IHS; and
executing the vulnerability management service instructions, comprising:
accessing a plurality of catalogs specifying known vulnerabilities of hardware components of the IHS;
determining whether any of the configuring of any of the one or more of the configurations for one or more of the plurality of hardware components of the IHS are identified as vulnerable in one or more of the catalogs; and
blocking the onboarding of the IHS as the edge compute endpoint to the edge orchestrator by the IHS until the configuring of the one or more hardware components of the plurality of hardware components of the IHS is modified to include no configuring of the one or more hardware components of the plurality of hardware components of the IHS with vulnerabilities identified in the plurality of catalogs.

### Claim 10 (depends on 9)

The method of claim 9, wherein the plurality of catalogs comprise a catalog of hardware component vulnerabilities known to a manufacturer of the IHS.

### Claim 11 (depends on 10)

The method of claim 10, wherein the plurality of catalogs comprise a catalog of hardware component vulnerabilities known to a manufacturer of one or more of the plurality of hardware components of the IHS.

### Claim 12 (depends on 10)

The method of claim 10, further comprising identifying one or more vulnerability proofing requirements for the IHS within a factory provisioned identity certificate of the IHS.

### Claim 13 (depends on 12)

The method of claim 12, wherein the factory-provisioned identity certificate is cryptographically bound to the remote access controller of the IHS.

### Claim 14 (depends on 12)

The method of claim 12, wherein the vulnerability proofing requirements further specify the plurality of catalogs of known vulnerabilities for use in identifying hardware component configurations that are vulnerable.

### Claim 15 (depends on 9)

The method of claim 9, wherein the vulnerability catalogs specify workload configurations with alternate firmware versions that are not associated with known vulnerabilities.

### Claim 16 (depends on 9)

The method of claim 9, wherein detecting the onboarding of the IHS as the edge compute endpoint to the edge orchestrator further comprises the edge orchestrator discovering or detecting the edge compute endpoint upon the edge compute endpoint being connected to a switch that connects to the edge orchestrator.

### Claim 17

A remote access controller supporting remote management of an Information Handling System (IHS), the remote access controller comprising a memory device having instructions stored thereon that, upon execution by a logic unit, cause the remote access controller to:
detect launch of onboarding of the IHS as an edge compute endpoint to an edge orchestrator that comprises vulnerability management service instructions; and
execute the vulnerability management service instructions, which causes the remote access controller to:
access a plurality of catalogs specifying known vulnerabilities of hardware components;
determine whether the onboarding of the IHS as the edge compute endpoint to the edge orchestrator comprises configuring one or more of a plurality of hardware components of the IHS with a configuration identified as vulnerable in one or more of the catalogs; and
block onboarding of the IHS as the edge compute endpoint to the edge orchestrator by the IHS until the configuring of one or more of the plurality of hardware components of the IHS with a configuration identified as vulnerable in one or more of the catalogs are modified to include no configurations with vulnerabilities identified in the plurality of catalogs.

### Claim 18 (depends on 17)

The remote access controller of claim 17, wherein the plurality of catalogs comprise a catalog of hardware component vulnerabilities known to a manufacturer of the IHS.

### Claim 19 (depends on 17)

The remote access controller of claim 17, wherein the plurality of catalogs comprise a catalog of hardware component vulnerabilities known to a manufacturer of one or more of the plurality of hardware components of the IHS.

### Claim 20 (depends on 17)

The remote access controller of claim 17, wherein execution of the vulnerability management service instructions further causes the remote access controller to identify one or more vulnerability proofing requirements for onboarding of the IHS as the edge compute endpoint to the edge orchestrator within a factory provisioned identity certificate of the IHS.