Apple Inc.

Nikolaj Schlej

Jerrold Von Hauck

Joshua P De Cesare

Timothy R Paaske

Josh P De Cesare

Wade Benson

Thomas P Mensch

Jeffrey R Wilcox

Austin G Jennings

Hardik K Doshi

Jacques Fortier

Xeno S Kovah

Corey T Kallenberg

Kevin H Alderfer

Ezekiel T Runyon

A method and apparatus for performing a secure boot of a computer system is disclosed. A computer system according to the disclosure includes an auxiliary processor and a main processor. The boot process includes initially booting the auxiliary processor. The auxiliary processor includes a non-volatile memory storing boot code for the main processor. The auxiliary processor may perform a verification of the boot code. Subsequent to verifying the boot code, the main processor may be released from a reset state. Once the main processor is no longer in the reset state, the boot code may be provided thereto. Thereafter, the boot procedure may continue with the main processor executing the boot code.

Method and apparatus for secure system boot

A method and apparatus for protecting boot variables is disclosed. A computer system includes a main processor and an auxiliary processor. The auxiliary processor includes a non-volatile memory that stores variables associated with boot code that is also stored thereon. The main processor may send a request to the auxiliary processor to alter one of the variables stored in the non-volatile memory. Responsive to receiving the request, the auxiliary processor may execute a security policy to determine if the main processor meets the criteria for altering the variable. If the auxiliary processor determines that the main processor meets the criteria, it may grant permission to alter the variable.

Method and apparatus for boot variable protection

Growing community of inventors

Sunnyvale, CA, United States of America

Nikolaj Schlej