Method and apparatus for remote rom flashing and security management for a computer system

Abstract

A remote flash ROM and security package is formed and delivered to a system ROM of a target computer system for remote flashing of the ROM and remote configuration of security settings for the computer system. The remote flash ROM and security package includes flash ROM and security control code for calling a remote flash and security driver to execute a remote flash or to remotely configure a security setting, a file containing a “signed” ROM image to be flashed to the ROM, a security settings file which preferably is encrypted, and a remote flash and security control container for containing the flash ROM and security code, the ROM image, and the security settings file. The remote flash and security driver may be included in the remote flash ROM and security package or may be resident to the target computer system. In the preferred embodiment, the computer system includes a secure memory device containing an administrator password for locking and unlocking the ROM. The remote flash ROM and security package preferably includes an administrator password matching the administrator password stored in the secure memory device to place the computer system in an administrator mode. A system ROM thereby may be flashed or a security setting changed remotely without the need for a user to enter an administrator password. Further, flashing the ROM or changing a security setting occurs as an “inband” process. Flashing a ROM or changing a security setting by remotely providing an administrator password to a secure memory device eliminates the need to reboot a computer system after downloading the ROM and security package.