Systems and methods for secure certificate use policies
AssigneeDell Products L.P.
InventorsRichard M. TONRY, Ibrahim SAYYED
Life of this patent
Estimating the term…
Abstract
An information handling system may include a processor and a basic input/output system communicatively coupled to the processor and embodied by executable instructions embodied in non-transitory computer readable media, the instructions configured to, when executed by the processor: identify, for a firmware image, a secure boot certificate; identify, for the secure boot certificate, a certificate use policy; determine whether the certificate use policy permits verification of the firmware image using the secure boot certificate; and allow the firmware image to be verified with the secure boot certificate if the certificate use policy permits verification of the firmware image using the secure boot certificate.
Claims21
An information handling system comprising:
- a processor;
- and
- a basic input/output system communicatively coupled to the processor and embodied by executable instructions embodied in non-transitory computer readable media, the instructions configured to, when executed by the processor:
- identify, for a firmware image, a secure boot certificate;
- identify, for the secure boot certificate, a certificate use policy;
- determine whether the certificate use policy permits verification of the firmware image using the secure boot certificate;
- and
- allow the firmware image to be verified with the secure boot certificate if the certificate use policy permits verification of the firmware image using the secure boot certificate.
A method comprising, in a basic input/output system of an information handling system:
- identifying, for a firmware image, a secure boot certificate;
- identifying, for the secure boot certificate, a certificate use policy;
- determining whether the certificate use policy permits verification of the firmware image using the secure boot certificate;
- and
- allowing the firmware image to be verified with the secure boot certificate if the certificate use policy permits verification of the firmware image using the secure boot certificate.
An article of manufacture comprising:
- a computer readable medium;
- and
- computer-executable instructions carried on the computer readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to, in a basic input/output system of an information handling system:
- identify, for a firmware image, a secure boot certificate;
- identify, for the secure boot certificate, a certificate use policy;
- determine whether the certificate use policy permits verification of the firmware image using the secure boot certificate;
- and
- allow the firmware image to be verified with the secure boot certificate if the certificate use policy permits verification of the firmware image using the secure boot certificate.
Dependencies are inferred from the claim text.