使用 eSFI 和 PCIe-MI 管理和保护您的 PCIe 基础架构.pdf

1、Paul Kaler,Storage&Security Futures Architect,HPEAustin Bolen,Server Engineering,Dell TechnologiesManage and Secure your PCIe Infrastructure using eSFI and PCIe-MIPaul Kaler,Storage&Security Futures Architect,HPEAustin Bolen,Server Engineering,Dell TechnologiesManage and Secure your PCIe Infrastruct

2、ure using eSFI and PCIe-MIHARDWARE MANAGEMENTPCIe Management Interface(PCIe-MI)Standards-based BMC interface to perform PCIe-specific management operationsEnables BMCs to perform PCIe initialization(e.g.,reading/writing configuration space)Enhanced System Firmware Intermediary(eSFI)Standards-based B

3、MC interface to control visibility of PCIe components to an in-band hostEnables BMCs to initialize PCIe components prior to exposing to an in-band hostEnhances Downstream Port traffic filtering to enable only out-of-band trafficOverviewGeneric management operations already covered by Platform Level

4、Data Model(PLDM)Sensor monitoring(e.g.,temperature),firmware update,etc.Security already covered by Security Protocol and Data Model(SPDM)Measurement,authentication,secure sessions,authorization,etc.Device specific management already covered by protocols such as:NC-SI for network controllersNVMe-MI

5、for NVMe devicesCCI for CXL type 3 memory devicesPCIe-MI enables a standard management protocol across PCIe device types for PCIe-specific operationsPCIe Configuration Space accessGetting/Setting link subdivisionsGetting/Setting clocking modesMotivation for PCIe Architected OOB ManagementCover Gaps

6、Not Handled by Existing OOB Management StandardsEliminate duplication of effortPCIe-specific functionality is often duplicated for each PCIe device typeReduce vendor-specific implementations to ease adoption.Eliminate the need for proprietary in-band management toolsSystem vendor-developed managemen