Hewlett-packard Development Company, L.p.

Compaq Information Technologies Group, L.p.

Compaq Computer Corporation, Inc.

Lan Wang

Valiuddin Y Ali

Jennifer E Rios

Jeffrey Kevin Jeansonne

Boris Balacheff

James Robert Waldron

Manuel Novoa

James Luke Mondshine

Baraneedharan Anbazhagan

Wei Ze Liu

Christopher H Stewart

Vali Ali

Shab H Madina

Jon Liu

Paul Poh Loh Cheok

Woon Jeong Lee

Rosilet Retnamoni Braduke

Leonard E Russo

Jeffrey C Parker

Patrick L Gibbons

Pablo J Salazar

Peter D Hunt

Mark E Baerenstecher

Valluddin Y Ali

Dong Rong Qiu

Chris I Dalton

Premanand Sakarda

Harold Merkel

Wael M Ibrahim

Richard Bramley

Dong Wei

Dallas M Barlow

Charles Ricardo Staub

Jayne E Scott

Christopher Ian Dalton

Jon G Lloyd

Quoc P Pham

Stanley Hyojun Park

Diogo Cesa Rosa

David J DeLisle

Rajesh A Shah

ChengKai Yeh

Marcelo Gomes De Oliveira

Fernando Ferretto

Xianglong Du

Xinmin Zhang

Tiago V De Quadros Weber

Wei-Ze Liu

Julio Cesar Sa Campao

Christian Pena

Wael Mohamad Ibrahim

Jennifer Rios

An example computing device includes a non-volatile memory to store Basic Input/Output Systems (BIOS) data of the computing device, an audio codec, and a controller. The controller is to: receive a command from a provisioning device at the audio codec; and transfer a copy of the BIOS data between the controller and the memory based on the command.

BIOS configurations via provisioning devices

Examples associated with password updates are described. One example method includes receiving a request to modify an administrator password in a basic input/output system (BIOS). The administrator password may be updated. A first password tied to the administrator password may be identified. A first updated password is generated by concatenating a character string to the administrator password. The character string may be generated based on a password policy for the first password. The first password may then be updated to the first updated password.

Password updates

A storage may store machine-readable instructions for execution by a processor. Execution of the machine-readable instructions may cause the processor to receive an update capsule via a firmware update interface. The update capsule may include a device identifier and a payload. The payload may include data that is different from a firmware update. Execution of the machine-readable instructions may cause the processor to execute a virtual device handler, based on the device identifier, to process the payload.

Virtual device handlers to process update capsule payloads

The update progress of a basic input/output system (BIOS) is displayed on a display screen. A first chipset lock is applied to a first region of a shared serial peripheral interface (SPI) chip of the BIOS of a computer system containing a first program of instructions. A system management memory mode lock is applied to a second and a third region of the shared SPI chip containing a second and third programs of instructions respectively. The second program of instructions is updated, and control of the BIOS is transferred to the updated second program of instructions. The updated second program of instructions updates the first program of instructions. The BIOS update progress visual is displayed on the display screen of the computer system while updating the first program of instructions.

Displaying a BIOS update progress

In an example implementation according to aspects of the present disclosure, a method may include receiving by a controller a BIOS image, extracting a current manufacturing programming mode state corresponding to a computer system. A BIOS personality of the BIOS image is evaluated, wherein the BIOS personality is based on a differentiation of hardware and software functionality. Based on the current manufacturing programming state and the BIOS personality, a compatibility with the computer system is determined. Based on the compatibility, the BIOS image is written to non-volatile memory.

BIOS personalities

Examples associated with heartbeat signal verification are disclosed. One example includes verifying a provisioning key using a trusted key. The provisioning key is received from a remote device via an intermediary process. An intermediate key provided by the intermediary process is verified using the provisioning key. A session identifier encrypted using the intermediate key and provided to the intermediary process. A first heartbeat signal is received from intermediary process. The heartbeat signal is generated based on the session identifier.

Heartbeat signal verification

In some examples, an embedded controller in a system monitors a basic input/output system (BIOS) policy stored in a non-volatile storage, and executes a management action with respect to the BIOS policy, where the monitoring and the executing are performed by the embedded controller independent of instructions executed by a processor in the system.

Management with respect to a basic input/output system policy

Examples herein disclose a command to control a use of a test key for installation of a test basic input output system (BIOS). The examples validate a command and replace at least a portion of a production BIOS with the test BIOS based on an allowance of the test key.

Allowing use of a test key for a BIOS installation

Examples herein disclose receiving a basic input output system (BIOS) policy change and authorizing the BIOS policy change. Upon the authorization of the BIOS policy change, a first copy of the BIOS policy is stored in a first memory accessible by a central processing unit. Additionally, a second copy of the BIOS policy change is transmitted for storage in a second memory electrically isolated from the central processing unit.

Authorizing a bios policy change for storage

Example implementations relate to operational verification. In an example, operational verification includes a processor, a shared non-volatile memory storing updated system, and an embedded controller (EC) to operationally verify the updated system instructions based on comparison of a length of time associated with a BIOS boot of the computing system using the updated system instructions to a boot time threshold.

Operational verification

Bottle

An electronic device has a lower power state in which power to a storage device is disabled. Predetermined information stored in a memory is useable to unlock the storage device during a procedure to transition the electronic device from the lower power state to a higher power state. The predetermined information is different from a credential for use in unlocking the storage device.

Unlocking a storage device

Example implementations relate to key revocation. For example, a system for key revocation may comprise a processor, an embedded controller, a non-volatile memory storing a system instruction signing key authorization data element, wherein the data element includes a system instruction signing key, a signing key number and a signature. The embedded controller may include a plurality of keys to verify the data element, and a one-time programmable (OTP) memory and a key among the plurality of keys that is revocable using the OTP memory, wherein revocation of the key permanently prevents the embedded controller from utilizing the key.

Key revocation

Growing community of inventors

Cypress, TX, United States of America

Lan Wang