2025 Manageability Workshop Presented by DMTF at OCP Global Summit

Monday, October 13th
Time: 12:00 to 3:30pm PT
San Jose Convention Center

Room Information:
LL20BC

This manageability workshop, presented by DMTF, contains the latest updates on infrastructure management & security from DMTF member companies, many of which are also active in OCP projects around hardware management, security & open-source development.

Schedule

12:00-12:05pmOpening Remarks
Jeff Hilland (Hewlett Packard Enterprise), DMTF President

Redfish Track

12:05-12:20pmgRPC vs REST benchmarks using Redfish
Jeff Hilland (Hewlett Packard Enterprise), DMTF President
Bailey Hollis (TAMU)
Abstract:
The manageability world is wrestling with gRPC vs REST when it comes to the protocol used for transferring management information. While there are some benchmarks comparing the two, they neglect key comparisons. Those published often measure REST on HTTP 1.1 but Redfish supports both HTTP 1.1 and HTTP 2.  And they don’t include full API transfer time, including marshalling and unmarshalling of the data.  And what is the effect of CPU utilization, latency and bandwidth?  Prior benchmarks neglect this information. This session reveals the results of a benchmark designed to indicate exactly where the benefits are for manageability workloads in a head to head comparison so that the manageability industry can assess the benefits.
12:25-12:45pm Aggregating the Redfish model for expansion modules
Mike Raineri (Dell Technologies), DMTF Redfish Forum co-chair
Hari Ramachandran (Microsoft Corporation)
Abstract:
As a system is created by combining complex compute modules from multiple sources, the Redfish client would value consistent behavior of the management model. DMTF has published the “Redfish Aggregation Guidance for Compute Expansion Modules” whitepaper. The whitepaper provides guidance to system integrators on the behavior of the Redfish data model when Redfish-enabled modules are added, such as a Universal Baseboard (UBB) containing OCP Accelerator Modules (OAM).
12:50-1:10pm Enabling Data Center Management with DMTF Redfish: Message Registry Opportunities and Technical Challenges
Hari Ramachandran (Microsoft Corporation)
Abstract:
The rapid evolution and increasing complexity of modern data centers demand standardized, scalable, and interoperable management solutions. The Distributed Management Task Force (DMTF) Redfish specification has emerged as a next-generation protocol designed to replace legacy interfaces like IPMI, offering a RESTful interface, JSON data format, and OData modeling for secure and efficient hardware management. Central to Redfish’s alerting and event capabilities is the Message Registry—a standardized framework for defining, communicating, and interpreting management messages. This paper explores the transformational potential of Redfish in data centers, focusing on the practical adoption of the Message Registry, its role in automation and interoperability, and the technical challenges. We examine both the opportunities and limitations , providing insights into the challenges of integrating Redfish into existing infrastructure and the considerations necessary for future scalability.
1:15-1:35pm Streaming Telemetry proposal update
Jeff Autor (Vertiv)
Abstract:
This session will provide an update on the streaming telemetry proposal first presented at last year’s workshop.  Feedback has been incorporated to prioritize telemetry integration with popular time series database clients.  The updated approach focuses on an improved payload design, interoperable methods to create time-label-value (TLV) records, and an easier transition for existing MetricReport implementations.

DMTF (SPDM and PMCI) Track

1:40-2:00pm Introduction to DMTF Authorization Specification
Scott Phuong (Microsoft Corporation)
Raghu Krishnamurthy (NVIDIA Corporation)
Abstract:
This presentation introduces the DMTF SPDM Authorization specification (DSP0289), a crucial component for enhancing the security of platform firmware. We will explore how this specification extends the existing SPDM protocol to enable robust, policy-driven access control for device management. Attendees will gain an understanding of the core concepts, including credentials and policies, and features that are planned for incorporation into the CXL specification. The presentation also covers enhancements to the Secure Message specification (DSP0277) that allow more efficient transmission of Authorized messages. Through practical examples and use cases, we will demonstrate how SPDM Authorization facilitates secure and flexible management of platform resources, addressing critical security challenges in modern data centers and edge devices. This session is ideal for engineers and security professionals interested in firmware security, platform management, and supply chain integrity.
2:05-2:25pm Enhancements to PLDM Firmware Update
Patrick Caporale (Lenovo), DMTF VP of Marketing and PMCI WG co-chair
Yuval Itkin (NVIDIA Corporation)
Abstract:
The PLDM Firmware Update standard (DSP0267) has enabled a consistent and common method for updating code on a wide variety of devices. Through the years, the standard has added additional features which provide even more flexibility, error handling, and support for downstream devices. This session will discuss the recent additional and what is available in the latest 1.3 spec version while also giving a preview of some major enhancements coming for 1.4 in the near future.
2:30-2:50pm Advancing PLDM: Structured Sensors, Scalable Modeling, and the Server Host SoC PLDM Specification
Justin King (Advanced Micro Devices)
Samer El-Haj-Mahmoud (ARM, Inc)
Abstract:
As server platforms grow in complexity—with more cores, memory controllers, accelerators, and sensors—existing PLDM mechanisms face limitations in how systems are described and managed. This session presents early DMTF work to extend PLDM with scalable and structured modeling capabilities, including Structured PLDM Sensors, Scalable Entity Association PDRs, and Clone PDRs. We will also introduce a new DMTF informational specification for modeling Server Host SoCs, which builds on these extensions to define sensors and effecters across SoC subsystems including cores, memory, PCIe, and networking. These innovations aim to improve interoperability, enable structured data representation, and enhance manageability for complex and modular systems. The session shares current work-in-progress from the DMTF PMCI working group and invites engagement from the OCP community to align future server design and firmware implementations.

DMTF Tools Overview Track

2:55-3:30pm New tests to verify Redfish service conformance
Mike Raineri (Dell Technologies), DMTF Redfish Forum co-chair
Abstract:
The Redfish-Use-Case-Checkers recently had a major update to align test flows and reports with other Redfish test tools. The Redfish-Use-Case-Checkers broadens the scope of Redfish conformance testing by verifying functional behaviors expected in client workflows. Example client workflows include account management, boot override, and power/reset control. Conformance program notice.
libspdm: Past, Present, and Future
Steven Bellock (NVIDIA Corporation)
Abstract:
libspdm is the DMTF's reference implementation of the Security Protocol and Data Model (SPDM) and its related specifications. While its development began in 2020 as a proof-of-concept of the SPDM specification, the repository has since grown in features, robustness, and adoption to become a substantial open source project that is utilized by many companies and other open source projects. This high-level talk presents the history of libspdm, its architecture and development processes, and its contributions back to SPDM specifications. It also covers security issues and vulnerabilities and the ways in which they were handled. Finally, it looks forward to new technologies such as the implementation of post-quantum cryptography in SPDM.
PMCI Tools Task Force Update and Demonstration
Jim Harford (Broadcom Inc.)
Abstract:
The industry, and specifically OCP, has adopted DMTF manageability standards. Many OEMs are integrating PMCI WG standards such as PLDM and NC-SI into their products to allow seamless integration into PMCI WG compliant platforms. The PMCI Tools Task Force (TF) is a subsidiary of the PMCI WG and is focused on developing an open-source suite of tools to assist BMC and Devices integration.
This presentation, as part of the broader DMTF Tools Panel Discussion, will introduce the PMCI Tools TF GitHub Repository with an expected release schedule for the updated DSP0280 PMCI Test Tools Interface and Design Specification. A review of the component architecture will be presented: PMCI Protocol Validator, Test Service Library, and Control Plane.
Key Features of the PMCI Tools TF deliverables:
  • Universal (open source with expected 80-95% compiled compatibility)
  • Statically linked or a stand-alone DLL style library
  • Allows for diversity in BMC (Control Plane) integrations; Designed to allow BMC operations to co-exist with the Test Service Library PMCI transactions.
  • PMCI-Protocol-Validator provides consistent stimulus & verification of PMCI WG protocols on a device, using the Control Plane as a pass-through support agent.
Date(s): 
Monday, October 13, 2025