System and method of authenticating firmware

A method, comprising:

• accessing, by an authentication device an information handling system, a memory medium associated with an integrated circuit (IC) of the information handling system to obtain firmware the IC;
• receiving, by the authentication device, the firmware of the IC from the memory medium;
• accessing, by the authentication device, the memory medium to obtain a digital signature of the firmware, wherein the digital signature includes an encrypted hash value, encrypted via an asymmetric encryption process with a private encryption key;
• receiving, by the authentication device, the digital signature of the firmware from the memory medium;
• determining, by the authentication device, a first hash value of the firmware;
• decrypting, by the authentication device, the encrypted hash value, via the asymmetric encryption process with a public encryption key associated with the private encryption key, to obtain a second hash value;
• determining, by the authentication device, if the first hash value matches the second hash value;
• if the first hash value matches the second hash value, permitting, by the authentication device, the information handling system to boot an operating system;
• and
• if the first hash value does not match the second hash value, preventing, by the authentication device, the information handling system from booting the operating system.

An authentication device, comprising:

• a processor;
• and
• a first memory medium, coupled to the processor, that stores instructions executable by the processor, which when executed by the processor, cause the authentication device to:
• access a second memory medium associated with an integrated circuit (IC) of an information handling system to obtain firmware the IC;
• receive the firmware from the second memory medium;
• access the second memory medium of the IC to obtain a digital signature of the firmware, wherein the digital signature includes an encrypted hash value, encrypted via an asymmetric encryption process with a private encryption key;
• receive the digital signature of the firmware from the second memory medium;
• determine a first hash value of the firmware;
• decrypt the encrypted hash value, via the asymmetric encryption process with a public encryption key associated with the private encryption key, to obtain a second hash value;
• if the first hash value matches the second hash value, permit the information handling system to boot an operating system;
• and
• if the first hash value does not match the second hash value, prevent the information handling system from booting the operating system.