Identification of devices in UEFI secure boot databases
AssigneeDell Products L.P.
InventorsWilliam C. Munger, Marshal F. Savage
Life of this patent
Estimating the term…
Abstract
An information handling system includes a memory and a basic input/output system (BIOS). The memory stores a lookup table to associate each of a plurality of device firmware hashes with a corresponding one of a plurality of device identification strings. The BIOS calculates the each of the device firmware hashes. Each device firmware hash is associated with a different device firmware. The BIOS creates the lookup table based on the calculated device firmware hashes and the device identification strings. Based on the lookup table, the BIOS displays a secure boot allowed devices database list on a display device.
Claims20
An information handling system comprising:
- a memory to store a lookup table to associate each of a plurality of device firmware hashes with a corresponding one of a plurality of device identification strings;
- and
- a basic input/output system (BIOS), during a first boot of the information handling system, the BIOS to:
- calculate each of the device firmware hashes, wherein each device firmware hash is associated with a different device firmware;
- create the lookup table based on the calculated device firmware hashes and the device identification strings;
- and
- based on the lookup table, display a secure boot allowed devices database list on a display device, wherein the secure boot allowed devices database list includes both a first device firmware hash and a first device identification string for a first device.
A method comprising:
- calculating, by a basic input/output system (BIOS) of an information handling system, device firmware hashes, wherein each device firmware hash is associated with a different device firmware;
- creating, by the BIOS, a lookup table based on the device firmware hashes and the device identification strings;
- storing the lookup table in a memory;
- and
- based on the lookup table, displaying a secure boot allowed devices database list on a display device, wherein the secure boot allowed devices database list includes both a first device firmware hash and a first device identification string for a first device.
An information handling system comprising:
- a memory to store a lookup table to associate each of a plurality of device firmware hashes with a corresponding one of a plurality of device identification strings;
- and
- a basic input/output system (BIOS), during a first boot of the information handling system, the BIOS to:
- calculate each of the device firmware hashes, wherein each device firmware hash is associated with a different device firmware;
- create the lookup table based on the device firmware hashes and the device identification strings;
- based on the lookup table, display a secure boot allowed devices database list on a display device, wherein the secure boot allowed devices database list includes both a first device firmware hash and a first device identification string for a first device;
- and
- based on the lookup table, display a secure boot deny devices database list on the display device, wherein the secure boot deny devices database list includes both a second device firmware hash and a second device identification string for a second device.
Dependencies are inferred from the claim text.