Out of band management of basic input/output system secure boot variables
AssigneeCisco Technology, Inc.
InventorWilliam E. Jacobs
Life of this patent
Estimating the term…
Abstract
A method is provided in one example embodiment and includes storing secure boot variables in a baseboard management controller; and sending the secure boot variables to a basic input/output system (BIOS) during a power on self-test, where the BIOS utilizes the secure boot variables during runtime to authenticate drivers and an operating system loader execution. In particular embodiments, the secure boot variables may be included in a white list, a black list, or a key list and, further, stored in erasable programmable read only memory.
Claims18
A method for updating secure boot variables for authenticating operating system components and drivers, comprising:
- storing secure boot variables in a remote management server for one or more managed servers;
- sending the secure boot variables from the remote management server to an out-of band management controller installed in a managed server;
- writing, by the out-of-band management controller, the secure boot variables to a non-volatile random access memory (NVRAM) accessible to a basic input/output system (BIOS) of the managed server;
- and
- authenticating operating system components and drivers, by the BIOS, using the secure boot variables.
A managed server, comprising:
- a processor,
- a Basic Input/Output System (BIOS);
- and
- an out-of band management controller, wherein the out-of-band management controller is operative to:
- establish a connection to a remote management server storing secure boot variables for one or more managed servers;
- receive the secure boot variables from the remote management server;
- and
- write the secure boot variables to a non-volatile random access memory (NVRAM) accessible to the basic input/output system (BIOS) of the managed server;
- and
- wherein the BIOS is operative to authenticate operating system components and drivers installed on the managed server using the secure boot variables.
A system comprising:
- a managed server comprising a processor, a Basic Input/Output System (BIOS), and an out-of band management controller, wherein the out-of-band management controller is operative to:
- establish a connection to a remote management server storing secure boot variables for one or more managed servers;
- receive the secure boot variables from the remote management server;
- and
- write the secure boot variables to a non-volatile random access memory (NVRAM) accessible to the basic input/output system (BIOS) of the managed server;
- wherein the BIOS is operative to authenticate operating system components and drivers installed on the managed server using the secure boot variables;
- and
- a management server operative to modify the secure boot variables.
Dependencies are inferred from the claim text.