Synchronization of UEFI Secure Boot Variables on a Managed Server

An apparatus comprising:

• a network interface unit configured to receive communications over a network;
• and
• a processor coupled to the network interface unit and a memory and configured to:
• receive a request, at a managed server, from an entity to modify a portion of a basic input/output system (BIOS), the request including a data segment;
• verify that the requesting entity is authorized to modify a portion of the BIOS;
• modify the portion of the BIOS based on the received request and the data segment in response to verifying that the requesting entity is authorized to modify the portion of the BIOS;
• and
• store a copy of the data segment in a file on a baseboard management controller (BMC) that is communicatively coupled to the BIOS.

One or more non-transitory computer readable storage media encoded with software comprising computer executable instructions and when the software is executed operable to:

• receive a request, at a managed server, from an entity to modify a portion of a basic input/output system (BIOS), the request including a data segment;
• verify that the requesting entity is authorized to modify a portion of the BIOS;
• modify the portion of the BIOS based on the received request and the data segment in response to verifying that the requesting entity is authorized to modify the portion of the BIOS;
• and
• store a copy of the data segment in a file on a baseboard management controller (BMC) that is communicatively coupled to the BIOS.