Hewlett-packard Development Company, L.p.

Hewlett Packard Enterprise Development LP

Compaq Computer Corporation, Inc.

Compaq Information Technologies Group, L.p.

Patrick L Gibbons

Mark A Piwonka

Valiuddin Y Ali

Jeffrey Kevin Jeansonne

Baraneedharan Anbazhagan

Lan Wang

Paul James Broyles

Suhas Shivanna

Adrian John Baldwin

Kevin G Depew

Christopher H Stewart

Luis E Luciani, Jr

Richard A Bramley, Jr

Shiva R Dasari

Robert J Volentine

Dallas M Barlow

Jason Spottswood

Tevin Richards

Scott B Marcak

Robert Stephen Craig

Mark W Shutt

Kevin K Wong

An example computing device includes a memory accessible at startup of the computing device, a buffer, and a set of instructions. The memory stores a configuration setting that is configurable by the application of a change request. The memory also stores a first public key and a second public key. The buffer stores change requests submitted by a remote entity, including a first change request to make a first setting change and a second change request to make a second setting change. The first change request is signed by a first private key corresponding to the first public key, and the second change request is signed by a second private key corresponding to the second public key. The set of instructions retrieves a change request from the buffer, determines whether the change request is authenticated by a public key, and if authenticated, applies the change request.

Signed change requests to remotely configure settings

An example computing system in accordance with an aspect of the present disclosure includes a first controller and a second controller. The first controller is to verify integrity of a first root of trust (ROT), and generate an integrity signal indicating the results. The second controller is to verify integrity of a second ROT, write the firmware image to the first controller, and verify integrity of the written firmware image.

Multiple roots of trust to verify integrity

Examples herein disclose receiving a basic input output system (BIOS) policy change and authorizing the BIOS policy change. Upon the authorization of the BIOS policy change, a first copy of the BIOS policy is stored in a first memory accessible by a central processing unit. Additionally, a second copy of the BIOS policy change is transmitted for storage in a second memory electrically isolated from the central processing unit.

Authorizing a bios policy change for storage

A second physical-address-dependent code is generated from a first physical-address-dependent code using differential data, where the generating comprises converting a first physical address in a region of the first physical-address-dependent code to a second, different physical address for inclusion in a corresponding region of the second physical-address-dependent code.

Generating a second code from a first code

There is provided a system and method for programming a data storage device with a password. Specifically, there is provided a method comprising initiating a password programming routine for a data storage device, and programming the data storage device with the password associated with an external storage medium, wherein the data storage device is configured to condition access to the data stored on the data storage device based on the password.

System and method for programming a data storage device with a password

A method according to the invention ensures optimal memory configuration in a computer: A determination is made whether performance can be improved by rearranging the DIMMs that are installed in the computer. If so, then a user of the computer is notified that the DIMMs can be rearranged to improve performance.

Method for ensuring optimal memory configuration in a computer

A computer includes a processor, an input device and a read only memory ('ROM'). One or more passwords are flashed in the ROM in encoded form. The encoding process may include any well-known encryption or hash process. The password may include a power-on password usable to change the operating state of the computer and/or an administrator password. Such configuration data preferably also is stored on the ROM in encoded form. The encoded nature of the passwords makes it difficult for an unauthorized entity to gain access to the usable form of the passwords. Further, by storing the passwords and configuration in ROM, such as the computer's main system ROM, it is possible to control write access to the ROM because a computer's ROM can generally only be flashed using SMI code which operates outside the control of the computer's operating system and requires entry of a correct password.

Method for secure storage and verification of the administrator, power-on password and configuration information

A computer system that includes a system ROM with at least two sets of character strings, one set in English and at least one other set in a non-English language. Generally, each set of character strings includes characters, words and phrases that are translations of corresponding character strings in the other sets. In a preferred embodiment, the system ROM includes only two sets of character strings&mdash;one English and the other non-English. The non-English set of character strings is included as part of a &ldquo;language module&rdquo; stored or flashed into the system ROM. The character strings preferably are used to provide information and instructions to a user during system setup. When setup is run, the computer system determines whether a valid international language module is included in the system ROM. If a valid language module is included, the user is prompted to select either English or whatever international language is provided in the language module. Based on the user's selection for a language, additional information and instructions during setup are shown on the computer's display in the language selected by the user.

Method for supporting optical international language modules flashed into ROM

A computer system provides for flashing a non-volatile memory image to a non-volatile memory and reading data from a non-volatile memory independently of an operating system. An image buffer is allocated in a volatile memory of the computer system. If flashing a non-volatile memory image to the non-volatile memory is desired, the image buffer is loaded with a portion of the non-volatile memory image. BIOS interface code is then called to place an SMI event code into a memory and to generate a system management interrupt causing the computer system to enter a system management mode. SMI handler code examines the SMI event code and calls SMI service code. Next, the image buffer is located and the portion of the non-volatile memory in the image buffer is flashed to the non-volatile memory by the SMI service code. Locating the image buffer may include locating an image header defined within the volatile memory. The image header may include a password for providing access to the non-volatile memory. The steps of loading the image buffer, calling BIOS interface code, and flashing a portion of the non-volatile memory image to the non-volatile memory may be repeated until the entire non-volatile memory image is flashed to the non-volatile memory. Alternatively, if reading data from a non-volatile memory independently of an operating system is desired, a system management interrupt is generated to place the computer system in a system management mode, an SMI event code is placed in a memory, the SMI handler code processes the SMI event code and calls SMI service code, the image buffer is located by the SMI service code, and the SMI service code copies data from the non-volatile memory to the image buffer.

Growing community of inventors

Magnolia, TX, United States of America

Patrick L Gibbons