Method and system for avoiding boot failure from platform firmware resilience execution

A method of ensuring correct firmware images in a computer system, the method comprising:

• storing a project name in a memory of a programmable logic device executing a Platform Firmware Resilience routine separate from the firmware image, the routine monitoring and filtering malicious traffic on a system bus coupled to a processor;
• comparing the stored project name with a project name of a firmware image executable by the processor;
• preventing access by the processor to the firmware image if the stored project name does not match the project name of the firmware image;
• receiving a request for a firmware update after booting of the processor;
• comparing a project name of a firmware update with the stored project name;
• and
• preventing loading of the firmware update if the project name of the firmware update and the stored project name do not match while allowing the processor to continue to function.

A computer system comprising:

• a processor executing a basic input/output system (BIOS);
• a baseboard management controller (BMC);
• a first flash memory device coupled to the processor, the first flash memory storing a BIOS firmware image and a project name of the BIOS firmware image;
• a second flash memory device coupled to the BMC, the second flash memory storing a BMC firmware image and a project name of the BMC firmware image;
• and
• a programmable logic device coupled to the first and second flash memory devices, the programmable logic device including a non-volatile memory storing a project name and configured to execute a Platform Firmware Resilience routine separate from the BIOS firmware image and the BIOS firmware image, the routine monitoring and filtering malicious traffic on a system bus coupled to the processor and the BMC, to compare the project name associated with the BIOS firmware image and the project name associated with the BMC firmware image with the project name stored in the non-volatile memory before starting the BMC or executing the BIOS firmware image by the processor, and wherein the programmable logic device is further configured to receive a request for a firmware update after booting of the processor, compare a project name of a firmware update with the stored project name, and prevent loading of the firmware update if the project name of the firmware update and the stored project name do not match while allowing the processor to continue to function.