Operating system agnostic validation of firmware images
AssigneeHewlett Packard Enterprise Development LP
InventorSuhas Shivanna
Life of this patent
Estimating the term…
Abstract
Examples relate to providing operating system (OS) agnostic validation of firmware images. In some examples, a request to verify a number of firmware images is received, where each of the firmware images is associated with a metadata set. A first installation of a first firmware image of the firmware images is accessed via a physical interface, and a first metadata set is used to verify the first installation, where the first metadata set includes a firmware signature that is used to verify the first installation. At this stage, the request is forwarded to a child management processor, where the management processors are in a trusted group and related according to a tree hierarchy.
Claims12
A system for providing operating system (OS) agnostic validation of firmware images, the system comprising:
- a storage device to store a plurality of metadata sets that are each associated with one of a plurality of firmware images;
- and
- a management processor of a plurality of management processors that is operatively connected to the storage device, wherein the plurality of management processors are assigned to a trusted group, the management processor to:
- receive a request to verify the plurality of firmware images;
- access a first installation of a first firmware image of the plurality of firmware images via a physical interface;
- use a first metadata set of the plurality of metadata sets to verify the first installation;
- forward the request to a child management processor of the plurality of management processors, wherein the plurality of management processors are related according to a tree hierarchy;
- use a second metadata set of the plurality of metadata sets to verify a second installation of a second firmware image of the plurality of firmware images
- aggregate verification results from the plurality of management processors;
- and
- generate a firmware status response based on the verification results.
A method for providing operating system (OS) agnostic validation of firmware images, the method comprising:
- receiving a request to verify a plurality of firmware images, wherein each of the plurality of firmware images is associated with one of a plurality of metadata sets;
- accessing a first installation of a first firmware image of the plurality of firmware images via a physical interface;
- using a first metadata set of the plurality of metadata sets to verify the first installation, wherein the first metadata set comprises a firmware signature that is used to verify the first installation;
- forwarding the request to a child management processor of a plurality of management processors, wherein the plurality of management processors are in a trusted group and related according to a tree hierarchy;
- using a second metadata set of the plurality of metadata sets to verify a second installation of a second firmware image of the plurality of firmware images;
- aggregating verification results from the plurality of management processors;
- and
- generating a firmware status response based on the verification results.
A non-transitory machine-readable storage medium encoded with instructions executable by a processor for providing operating system (OS) agnostic validation of firmware images, the machine-readable storage medium comprising instruction to:
- receive a request to verify a plurality of firmware images, wherein each of the plurality of firmware images is associated with one of a plurality of metadata sets;
- access a first installation of a first firmware image of the plurality of firmware images via a physical interface;
- use a first metadata set of the plurality of metadata sets to verify the first installation, wherein the first metadata set comprises a firmware signature that is used to verify the first installation;
- forward the request to a child management processor of a plurality of management processors, wherein the plurality of management processors are in a trusted group and related according to a tree hierarchy;
- use a second metadata set of the plurality of metadata sets to verify a second installation of a second firmware image of the plurality of firmware images;
- aggregate verification results from the plurality of management processors, wherein each of the verification results describes that validity of one of the plurality of firmware images;
- and
- generate a firmware status response based on the verification results.
Dependencies are inferred from the claim text.