Dell Products Inc.

Jayanth Raghuram

Wei G Liu

Ching-Lung Chao

Vijay Bharat Nijhawan

Juan Francisco Diaz

Murali Manohar Shanmugam

Rui Shi

In one or more embodiments, one or more systems, one or more methods, and/or one or more processes may retrieve a first hash value of a key manifest public key from a one time programmable memory medium; determine a second hash value of the key manifest public key; retrieve a third hash value of an initial boot block from the boot policy manifest; determine a fourth hash value of the initial boot block; determine that the third hash matches the fourth hash value; execute the initial boot block; validate subordinate certificates with a root certificate; determine firmware hash values respectively from the firmware volumes; decrypt signatures respectively associated with the firmware volumes to obtain respective decrypted signatures, in which the signatures are decrypted with public encryption keys of the respective subordinate certificates; determine that the firmware hash values respectively match the decrypted signatures; and execute the firmware volumes.

System and method of authenticating firmware for an information handling system

A boot process security system includes a processing system including a plurality of registers, and at least one memory system that includes instructions that, when executed by the processing system, cause the processing system to provide a BIOS. During a Driver eXecution Environment (DXE) sub-process that is included in a boot process and that occurs prior to passing control of the boot process to any third-party drivers, the BIOS programs at least one of the plurality of registers in order to configure at least one secure subsystem. The BIOS then verifies, during the boot process, that the at least one secure subsystem has been configured to provide a predetermined configuration, and locks the at least one secure subsystem. The BIOS then confirms that the at least one secure subsystem has been locked prior to passing control of the boot process to any third-party drivers.

Boot process security self-check system

A chipset fuse programming system includes a chassis that houses a chipset with programmable fuses and a Basic Input/Output System (BIOS) that is coupled to the chipset. The BIOS includes a BIOS storage storing fuse configuration profiles. The BIOS determines a chipset type of the chipset and selects a first fuse configuration profile based on the chipset type. The BIOS then programs the programmable fuses included in the chipset using the first fuse configuration profile. A central processing system may be housed in the chassis and coupled to the BIOS, with the BIOS determining a central processing system type of the central processing system, and selecting the first fuse configuration profile based on a combination of the chipset type and the central processing system type.

Chipset fuse programming system

A security module authentication system includes a processing system that is configured to authenticate a security module based on a processing system type of the processing system. The system also includes a Basic Input/Output System (BIOS) coupled to the processing system and that includes a BIOS storage device. The BIOS storage stores a plurality of security modules each of which corresponds to a different processing system type. The BIOS is configured to utilize any of the plurality of security modules to perform a secure boot. The BIOS storage also stores an image table that identifies a first location in the BIOS storage of a first security module of the plurality of security modules. The first security module is authenticable by the processing system based on the processing system type of the processing system.

Growing community of inventors

Round Rock, TX, United States of America

Jayanth Raghuram