# US 11,907,373 B2 · Validation of fixed firmware profiles for information handling systems > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,907,373 B2 - Document ID: US11907373B2 - Status: Granted - Kind: B2 - Application number: 17/508,960 - Filed: 2021-10-22 - Published: 2023-04-27 - Granted: 2024-02-20 - Earliest claimed: 2021-10-22 - Assignees: Dell Products L.P. - Applicants: Dell Products, L.P. - Inventors: Marshal F. Savage; Mukund P. Khatri; Jason Matthew Young - Web page: https://patentgrep.com/patent/US11907373B2 ## CPC - G06F 21/572: {Secure firmware programming, e.g. of basic input output system [BIOS]} - G06F 21/575: {Secure boot} - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]} - G06F 8/65: Updates (security arrangements therefor G06F21/57) - G06F 2221/033: Test or assess software - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and procedures are provided for validating an IHS (Information Handling System) as operating using only factory-provisioned firmware. During factory provisioning of the IHS, a signed inventory certificate is uploaded to the IHS that includes an inventory identifying firmware for use in the operation of the IHS. Upon delivery and initialization of the IHS, the inventory certificate is retrieved by a pre-boot validation process. An inventory of firmware used by hardware components of the IHS is then collected. The validation process compares the collected inventory of firmware against the inventory of factory-provisioned firmware from the inventory certificate in order to validate the IHS is operating using only factory-provisioned firmware. A validation failure is signaled when the comparison indicates that a hardware component is not operating using the factory-provisioned firmware specified in the inventory certificate. Embodiments also support use of updated inventory certificates in accommodating authorized updates to the IHS firmware. ## Claims ### Claim 1 A method for validating firmware used by an IHS (Information Handling System), the method comprising: retrieving an inventory certificate uploaded to the IHS during factory provisioning of the IHS, wherein the inventory certificate includes an inventory identifying firmware for use by the IHS, and wherein the inventory certificate uploaded to the IHS during the factory provisioning is signed by a certificate authority of a manufacturer of the IHS; authenticating the inventory that identifies the firmware for use by the IHS, wherein the inventory is authenticated using cryptographic credentials that are included in the inventory certificate and that are signed by the certificate authority of the manufacturer of the IHS; collecting an inventory of firmware used by a plurality of hardware components of the IHS; comparing the collected inventory of firmware against the authenticated inventory from the inventory certificate in order to validate the IHS is operating using only factory-provisioned firmware; and signaling a validation failure when the comparison indicates that one or more of the plurality of hardware components is not operating using the factory-provisioned firmware specified in the inventory certificate. ### Claim 2 (depends on 1) The method of claim 1, wherein booting of an operating system of the IHS is halted in response to the validation failure. ### Claim 3 (depends on 1) The method of claim 1, wherein the IHS is bound to use of the firmware specified in the inventory certificate. ### Claim 4 (depends on 1) The method of claim 1, further comprising: updating firmware used by one or more of the hardware components; receiving an updated inventory certificate that includes an inventory identifying a fixed firmware profile for use by the IHS; and collecting an updated inventory of firmware used by the plurality of hardware components of the IHS; comparing the updated inventory of firmware used by the plurality of hardware components against the fixed firmware profile from the updated inventory certificate in order to validate the IHS is operating using a factory-provisioned fixed firmware profile. ### Claim 5 (depends on 1) The method of claim 1, wherein the firmware specified in the inventory certificate corresponds to a fixed firmware profile selected based on input by a customer. ### Claim 6 (depends on 5) The method of claim 5, wherein the fixed firmware profile adapts the IHS for operation according to a standard for computing systems. ### Claim 7 (depends on 5) The method of claim 5, wherein the fixed firmware profile adapts the IHS for operation in isolation from other IHSs. ### Claim 8 (depends on 5) The method of claim 5, wherein the fixed firmware profile restricts the IHS to remote management through operations supported by a remote access controller of the IHS. ### Claim 9 (depends on 5) The method of claim 5, wherein the fixed firmware profile adapts the IHS for use of a secure boot procedure. ### Claim 10 (depends on 5) The method of claim 5, wherein the fixed firmware profile comprises at least one of firmware and firmware settings for use by the plurality of hardware components. ### Claim 11 An IHS (Information Handling System) comprising: a plurality of hardware components; a persistent memory, wherein during factory provisioning of the IHS an inventory certificate is uploaded to the persistent memory, wherein the inventory certificate includes an inventory that identifies firmware for use by the plurality of hardware components of the IHS, and wherein the inventory certificate uploaded to the IHS during the factory provisioning is signed by a certificate authority of a manufacturer of the IHS; one or more processors; and one or more memory devices coupled to the processors, the memory devices storing computer-readable instructions that, upon execution by the processors, cause the IHS to: retrieve the inventory certificate uploaded to the persistent memory during factory provisioning of the IHS; authenticate the inventory that identifies the firmware for use by the IHS, wherein the inventory is authenticated using cryptographic credentials that are included in the inventory certificate and that are signed by the certificate authority of the manufacturer of the IHS; collect an inventory of firmware used by the plurality of hardware components of the IHS; compare the collected inventory of firmware against the authenticated inventory from the inventory certificate in order to validate the IHS is operating using only factory-provisioned firmware; and signal a validation failure when the comparison indicates that one or more of the plurality of hardware components is not operating using the factory-provisioned firmware specified in the inventory certificate. ### Claim 12 (depends on 11) The IHS of claim 11, wherein booting of an operating system of the IHS is halted in response to the validation failure. ### Claim 13 (depends on 11) The IHS of claim 11, wherein execution of the instructions by the processor further causes the IHS to: update firmware used by one or more of the hardware components; receive an updated inventory certificate that includes an inventory identifying a fixed firmware profile for use by the IHS; and collect an updated inventory of firmware used by the plurality of hardware components of the IHS, compare the updated inventory of firmware used by the plurality of hardware components against the fixed firmware profile from the updated inventory certificate in order to validate the IHS is operating using a factory-provisioned fixed firmware profile. ### Claim 14 (depends on 11) The IHS of claim 11, wherein the firmware specified in the inventory certificate corresponds to a fixed firmware profile selected based on input by a customer. ### Claim 15 (depends on 14) The IHS of claim 14, wherein the fixed firmware profile comprises at least one of firmware and firmware settings for use by the plurality of hardware components. ### Claim 16 (depends on 11) The IHS of claim 11, wherein the IHS is bound to use of the firmware specified in the inventory certificate. ### Claim 17 A non-transitory computer-readable storage device having instructions stored thereon for validating secure assembly and delivery of an IHS (Information Handling System), wherein execution of the instructions by one or more processors of the IHS causes a validation process of the IHS to: retrieve an inventory certificate uploaded to the IHS during factory provisioning of the IHS, wherein the inventory certificate includes an inventory identifying firmware for use by the IHS, and wherein the inventory certificate uploaded to the IHS during the factory provisioning is signed by a certificate authority of a manufacturer of the IHS; authenticate the inventory that identifies the firmware for use by the IHS, wherein the inventory is authenticated using cryptographic credentials that are included in the inventory certificate and that are signed by the certificate authority of the manufacturer of the IHS; collect an inventory of firmware used by a plurality of hardware components of the IHS; compare the collected inventory of firmware against the authenticated inventory from the inventory certificate in order to validate the IHS is operating using only factory-provisioned firmware; and signal a validation failure when the comparison indicates that one or more of the plurality of hardware components is not operating using the factory-provisioned firmware specified in the inventory certificate. ### Claim 18 (depends on 17) The storage device of claim 17, wherein booting of an operating system of the IHS is halted in response to the validation failure. ### Claim 19 (depends on 17) The storage device of claim 17, wherein the firmware specified in the inventory certificate corresponds to a fixed firmware profile selected based on input by a customer. ### Claim 20 (depends on 17) The storage device of claim 17, wherein the IHS is bound to use of the firmware specified in the inventory certificate.