Dell Products Inc.

Purushothama R Malluru

Ibrahim Sayyed

Chris Edward Pepper

Christopher Channing Griffin

Steven Downum

Adolfo Sandor Montero

Anand Prakash Joshi

Danilo Ong Tan

Alok Pant

Elmira M Bonab

Chris C Griffin

A data processing system comprising a processor having a working memory and processing logic, a boot system configured to load one or more algorithms for initializing a basic input output system (BIOS) of the processor into the working memory and an error correction system configured to start a watchdog timer and to monitor initialization of the processor, the error correction system further configured to implement a corrective process if the watchdog timer times out prior to initialization of the BIOS of the processor.

Error correction dynamic method to detect and troubleshoot system boot failures

Methods, systems, and devices for transitioning an information handling system (IHS) to a predetermined operating state is disclosed. During the transition, the IHS may obtain data from a variety of sources which may subject it to compromise. To reduce the likelihood that the IHS is compromised, the IHS may evaluate its environment and its own operation to determine its security state. Depending on its security state, the IHS may perform various actions to reduce the likelihood of it being compromised through its transition process.

System and method for managing device security during startup

An information handling system downloads device drivers for recovery operation of the information handling system, and subsequently obtains first configuration information associated with each of the device drivers. The system performs an inventory of devices associated with the information handling system that includes obtaining second configuration information associated with each of the devices in the inventory, and compares the first configuration information and the second configuration information. If the particular device driver is missing, then the system downloads the particular device driver prior to boot to a service operating system.

System and method for runtime synchronization and authentication of pre-boot device drivers for a rescue operating system

Methods and systems for managing the operation of data processing systems are disclosed. A data processing system may include a computing device that may enter various operating states by performing various types of startups. Performance of some startups may be restricted by use of passwords or other security information. The data processing systems may host management controllers that may bypass the restrictions on the startups. Prior to doing so, the management controllers may verify that the requests to perform the startups are from trusted entities, or should be performed for other reasons.

System and method for remote startup management

An information handling system may include a processor and a basic input/output system communicatively coupled to the processor and embodied by executable instructions embodied in non-transitory computer readable media, the instructions configured to, when executed by the processor: extract from a boot manifest a list of files associated with operating system applications of the information handling system and respective signatures for each of the files; locate the files listed in the boot manifest on a partition of a storage resource accessible to the processor; attempt to verify signatures for each of the files as stored on the storage resource against their respective signatures set forth in the boot manifest; enable execution of a boot loader for the operating system and the operating system applications in response to successful verification of the signatures; and abort a boot process of the information handling system in response to unsuccessful verification of the signatures.

Systems and methods for securing operating system applications with hardware root of trust

A method allocates a dynamic memory disk located in a pre-boot environment and accessible in the pre-boot environment and in an OS runtime environment. The method may transmit a request to a distribution system for an OS base image and a device driver that includes an identifier of the information handling system. The method receives a response including instructions on how to download the OS base image and the device driver associated with the identifier of the information handling system. The OS base image is modified to include a virtual device driver and an OS deployment agent. The method stores the OS base image and the device driver at the dynamic memory disk. The method loads the OS base image that includes installing an OS in the runtime environment. Then the dynamic memory disk may be mounted by the virtual device driver that may be installed by the OS.

System and method for preboot device driver provisioning for remotely-staged operating system

Systems and methods to build a trusted HTTPS session on a limited pre-boot BIOS environment in an information handling system. The information handling system may include a BIOS that may be stored in a secure read-only region of a flash storage. The BIOS may download signed certification authority (CA) information from a server based on a target location that may be stored at the secure read-only region. The BIOS may authenticate the signed CA information based on a public key that may be stored at the secure read-only region. The BIOS may, when the signed CA information is authenticated, download a root CA chain from the server and authenticate the root CA chain. The BIOS may, when the root CA chain is authenticated, establish a secure encrypted transport layer security (TLS) session with the server based the root CA chain.

Growing community of inventors

Round Rock, TX, United States of America

Purushothama R Malluru