Lenovo (singapore) Pte. Ltd.

Nathan K Campbell

Wen Wei Tang

Douglas Wayne Oliver

Songwu Shen

Wenwei Tang

Doug Oliver

ShengRui Ji

A method includes a unified extensible firmware interface of a compute node identifying an option ROM or an OS boot loader within the compute node, wherein the option ROM or OS boot loader stores a signed image that can be verified using a required digital certificate. The method further includes determining that the unified extensible firmware interface does not store the required digital certificate in a revocation database or in an authorization database. Still further, the method includes automatically identifying the required digital certificate in a database of digital certificates other than the revocation database or the authorization database, and providing the required digital certificate to the authorization database.

Automatic discovery and installation of secure boot certificates

Embodiments of the present invention provide a method, system and computer program product for UEFI firmware database management of keys and certificates during a UEFI secure bootstrap enabled boot of a computer. In an embodiment of the invention, a method for UEFI firmware database management for secure bootstrap of a computer includes initially receiving a request to modify a database in UEFI firmware of an operating computer. Thereafter, an impact of the request is determined in memory of the operating computer in terms of the operability of an accessory driver. As such, a prompt warning of the determined impact is generated in the memory and displayed in a display of the operating computer.

Unified extensible firmware interface (UEFI) database for secure bootstrap of a computer

Growing community of inventors

Edmonds, WA, United States of America

Nathan K Campbell