Systems and methods for secure boot and runtime tamper detection

A chassis comprising:

• a plurality of slots each configured to receive a corresponding modular information handling system;
• and
• a chassis management controller communicatively coupled to the plurality of slots and comprising a memory communicatively having stored thereon two redundant operating system images for executing the functionality of the chassis management controller, each operating system image comprising:
• an integrated kernel and initial root file system stored in a respective first partition of a memory of the chassis management controller;
• verity hashes of a root file system of such operating system image, the verity hashes stored in a respective second partition of the memory;
• and
• the root file system of such operating system image stored in a respective third partition of the memory;
• and
• wherein the chassis management controller is configured to:
• determine if both of the redundant operating system images were found during one or more previous boot sessions of the chassis management controller to be unsecure;
• and
• in response to determining that one of the two redundant operating system images is secure, initiating verification of such operating system image to determine if such operating system image has indicia of tampering.

A method comprising:

• determining if both of two redundant operating system images for executing functionality of a chassis management controller were found during one or more previous boot sessions of the chassis management controller to be unsecure, wherein each operating system image comprises:
• an integrated kernel and initial root file system stored in a respective first partition of a memory of the chassis management controller;
• verity hashes of a root file system of such operating system image, the verity hashes stored in a respective second partition of the memory;
• and
• the root file system of such operating system image stored in a respective third partition of the memory;
• and
• in response to determining that one of the two redundant operating system images is secure, initiate verification of such operating system image to determine if such operating system image has indicia of tampering.