Pre-authorized virtualization engine for dynamic firmware measurement

A method, in an information handling system having a processor, first non-transitory computer-readable media communicatively coupled to the processor and having stored thereon a basic input/output system (BIOS), a cryptoprocessor, and second non-transitory computer-readable media communicatively coupled to the processor and having stored thereon an operating system, the method comprising:

• executing a virtual BIOS engine configured to, during runtime of the operating system:
• in response to an operating system event for updating firmware, load onto an isolated compute domain of the processor to emulate firmware update processes of the first non-transitory computer-readable media with a virtual non-transitory computer-readable media and emulate the firmware update processes of the cryptoprocessor with a virtual cryptoprocessor;
• extract a firmware payload to the virtual non-transitory computer-readable media;
• and
• execute a virtual trust chain to measure the firmware payload in the virtual non-transitory computer-readable media.

An article of manufacture comprising:

• a first non-transitory computer-readable medium having stored thereon an operating system;
• and
• computer-executable instructions carried on the first computer-readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to, in an information handling system having a processor, the first non-transitory computer-readable media communicatively coupled to the processor, second non-transitory computer-readable media communicatively coupled to the processors and having stored thereon a basic input/output system (BIOS), and a cryptoprocessor:
• execute a virtual BIOS engine configured to, during runtime of the operating system:
• in response to an operating system event for updating firmware, load onto an isolated compute domain of the processor to emulate firmware update processes of the second non-transitory computer-readable media with a virtual non-transitory computer-readable media and emulate the firmware update processes of the cryptoprocessor with a virtual cryptoprocessor;
• extract a firmware payload to the virtual non-transitory computer-readable media;
• and
• execute a virtual trust chain to measure the firmware payload in the virtual non-transitory computer-readable media.