Secure option rom firmware updates
AssigneeDell Products L.P.
InventorsDavid Konetski, Frank Molsberry, Ricardo L. Martinez
Life of this patent
Estimating the term…
Abstract
Option ROM updates are performed in a secure manner with centralized control through system initialization firmware, such as the system BIOS. An option ROM updater manages copying an option ROM update to an auxiliary subsystem if an update bit is set, such as by a secure system management interface with the BIOS. Upon detection of an update bit, the option ROM updater unlocks a write protect at the auxiliary subsystem firmware and copies an option ROM update to the auxiliary subsystem to update the option ROM. After completing the option ROM update, the option ROM updater locks write protection of the option ROM to maintain system security.
Claims20
An information handling system comprising:
- a processor operable to execute instructions;
- memory interfaced with the processor and operable to store the instructions;
- a chipset operable to store and execute firmware;
- a BIOS stored in the chipset and operable to execute on the chipset;
- an auxiliary subsystem interfaced with the BIOS and operable to perform an auxiliary function with option ROM firmware instructions stored on the auxiliary subsystem;
- a write protect module stored on the auxiliary subsystem and operable to selectively lock and unlock a write protect of the option ROM firmware instructions;
- and
- an option ROM updater stored in the chipset and interfaced with the BIOS, the option ROM updater operable to detect an option ROM update bit set at the BIOS and in response to detecting the option ROM update bit to unlock the write protect and to load an option ROM update from a predetermined location to the auxiliary subsystem to write updated option ROM firmware instructions on the auxiliary subsystem.
A method for updating an option ROM of an information handling system, the method comprising:
- setting an option ROM update bit in initialization firmware;
- executing the initialization firmware;
- detecting the option ROM update bit with the initialization firmware;
- in response to detecting, copying an option ROM update from a predetermined location to the initialization firmware;
- updating the option ROM with the option ROM update;
- and
- completing executing the initialization firmware to bring the information handling system to an operational state with the update installed on the option ROM.
A system for updating an option ROM that manages an information handling system auxiliary subsystem, the system comprising:
- a processor disposed in the auxiliary subsystem and operable to lock and unlock a write protect of an option ROM of the auxiliary subsystem;
- and
- an option ROM updater interfaced with the processor, the option ROM updater operable to detect an option ROM update bit set in initialization firmware instructions and in response to detecting the option ROM update bit to unlock the write protect and to load an option ROM update from a predetermined location to the auxiliary subsystem, the option ROM update having updated option ROM firmware instructions for execution on the auxiliary subsystem processor.
Dependencies are inferred from the claim text.