Configuring basic input output system (BIOS) features based on a policy

A computing device comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable storage media to store instructions executable by the one or more processors to perform operations comprising:
• receiving settings associated with one or more features of a basic input output system (BIOS) of the computing device;
• receiving a device identifier that uniquely identifies the computing device;
• determining a policy identifier that identifies a policy being implemented by the settings associated with the one or more features of the BIOS;
• retrieving a public key associated with an organization that acquired the computing device;
• sending a request to a service to validate the policy, the request including the policy identifier and the public key;
• receiving a response from the service;
• based at least in part on determining that the response indicates that the policy is valid:
• initiating a reboot;
• and
• modifying, during the reboot, the one or more features of the BIOS of the computing device based on the settings.

One or more non-transitory computer-readable storage media to store instructions executable by one or more processors of a target device to perform operations comprising:

• receiving settings associated with one or more features of a basic input output system (BIOS) of the computing device;
• receiving a device identifier that uniquely identifies the computing device;
• determining a policy identifier that identifies a policy being implemented by the settings associated with the one or more features of the BIOS;
• initiating a reboot;
• modifying, during the reboot, the one or more features of the BIOS of the computing device based on the settings;
• retrieving a public key associated with an organization that acquired the computing device;
• sending a request to a service to validate the policy, the request including the policy identifier and the public key;
• receiving a response from the service;
• based at least in part on determining that the response indicates that the policy is valid, marking the BIOS as validated.