Enabling SPI firmware updates at runtime

    公开(公告)号:US11928214B2

    公开(公告)日:2024-03-12

    申请号:US17391617

    申请日:2021-08-02

    CPC classification number: G06F21/572 G06F8/65 G06F21/575

    Abstract: SPI firmware updates can be performed at runtime. A secure SPI flash access domain can be created during pre-boot and used at runtime to deliver and write a SPI firmware update to SPI flash. The secure SPI flash access domain can ensure that only a trusted component running on a trusted CPU core can access a SPI memory layout used to deploy the SPI firmware update to the SPI flash. Once the SPI firmware update is written to the SPI flash, a reboot can be triggered so that the updated SPI firmware is loaded to perform the boot process.

    Boot assist zero overhead flash extended file system

    公开(公告)号:US11249767B2

    公开(公告)日:2022-02-15

    申请号:US16268164

    申请日:2019-02-05

    Abstract: An information handling system may load first data from a location information area of a first memory, specifying a plurality of locations of metadata for a plurality of stages of basic input/output system (BIOS) initialization. The information handling system may then load first metadata for a first stage of BIOS initialization from a first metadata location of the plurality of locations specified by the first data. The first metadata may contain information for indexing first initialization data located at a first initialization data location. The information handling system may then index the first initialization data of the first initialization data location based, at least in part, on the first metadata. The information handling system may then perform the first stage of BIOS initialization based, at least in part, on the first initialization data.

    System and method for intercept of UEFI block I/O protocol services for BIOS based hard drive encryption support
    6.
    发明授权
    System and method for intercept of UEFI block I/O protocol services for BIOS based hard drive encryption support 有权
    用于拦截基于BIOS的硬盘驱动器加密支持的UEFI块I / O协议服务的系统和方法

    公开(公告)号:US09208105B2

    公开(公告)日:2015-12-08

    申请号:US13905200

    申请日:2013-05-30

    Abstract: An information handling system and method performs Unified Extensible Firmware Interface (UEFI) interception and pre-processing of data associated with block input/output (I/O) commands targeting encrypted storage devices. A UEFI interceptor block (IB) I/O driver intercepts each block I/O command targeting block addresses on a storage device and identifies whether any of the target block addresses is encrypted. In response to identifying an encrypted block address among the target block addresses, the UEFI IB I/O driver forwards data associated with the encrypted block address to an encryption-decryption module to perform one of an encryption and a decryption of the data. Final handling of the block I/O command is performed using a block I/O driver chained to the UEFI IB I/O driver. Data associated with I/O commands targeting encrypted block addresses is first processed by the encryption-decryption module before final handling of the I/O command is performed by the block I/O driver.

    Abstract translation: 信息处理系统和方法执行统一的可扩展固件接口(UEFI)截取和预处理与针对加密存储设备的块输入/输出(I / O)命令相关联的数据。 UEFI拦截器块(IB)I / O驱动器拦截定位存储设备上的块地址的每个块I / O命令,并且识别任何目标块地址是否被加密。 响应于识别目标块地址中的加密块地址,UEFI IB I / O驱动器将与加密块地址相关联的数据转发到加密解密模块,以执行数据的加密和解密之一。 使用链接到UEFI IB I / O驱动程序的块I / O驱动程序来执行块I / O命令的最终处理。 与块I / O驱动器执行I / O命令的最终处理之前,加密解密模块首先处理与加密块地址对应的I / O命令相关联的数据。

    Unattended deployment of information handling systems

    公开(公告)号:US11675908B2

    公开(公告)日:2023-06-13

    申请号:US17377000

    申请日:2021-07-15

    Abstract: A method for deploying an information handling system (platform) determines whether a hardware key coupled to the platform constitutes a deployment key by validating a GUID of the key against a deployment key signature, generated by a trusted server and stored on the key. If the key is validated, a trust factor evaluation is performed by validating the deployment key against a second key, which is bound to a nonvolatile storage component containing a second key signature, generated by the trusted server based on a GUID of the nonvolatile storage component. Upon validating the trust factor, the platform boots into an unattended deployment mode loaded from the deployment key and validates an unattended deployment binary stored in the deployment key against the second key signature to establish a trusted execution session for loading unattended deployment modules from the deployment key and deploying the platform by executing the unattended deployment modules.

    FACILITATING THE IDENTIFICATION OF A SERVICE OPERATING SYSTEM WHEN A MAIN OPERATING SYSTEM FAILS

    公开(公告)号:US20200250038A1

    公开(公告)日:2020-08-06

    申请号:US16267268

    申请日:2019-02-04

    Abstract: The identification and loading of an appropriate service operating system can be facilitated when a main operating system fails. To facilitate the identification of which main operating system failed, an agent can create a UEFI variable that is specific to each main operating system on a client. These OS-specific UEFI variables can be employed to identify which main operating system has failed to boot. When a main operating system fails to boot, a UEFI preboot application can be configured to access the UEFI variables to identify which main operating system has failed. The UEFI preboot application can also obtain characteristics of the failed operating system from the UEFI variable and include such characteristics in a vendor extension of an SLP request. A server can employ the characteristics defined in the vendor extension to identify and send an appropriate service operating system to the client.

    Platform configuration management using a basic input/output system (BIOS)

    公开(公告)号:US09851985B2

    公开(公告)日:2017-12-26

    申请号:US14504218

    申请日:2014-10-01

    CPC classification number: G06F9/44505

    Abstract: Methods and systems for platform configuration management may use a platform configuration register (PCR) stored on a trusted platform module (TPM) included with an information handling system. A basic input/output system (BIOS) may include instructions to generate a first PCR value based on BIOS settings while a user is operating the BIOS. When the first PCR value indicates a change from a previous PCR value stored in the PCR, an alert may be displayed to the user and sent to a network administrator. The BIOS may display an indication of a mapping of BIOS settings to the first PCR value.

Patent Agency Ranking