Bios settings runtime modification authentication system

An Information Handling System (IHS), comprising:

• a processing system;
• and
• a memory system that is coupled to the processing system and that includes instructions that, when executed by the processing system, cause the processing system to provide a Basic Input/Output System (BIOS) engine that is configured to:
• generate a secret;
• create, with a Trusted Platform Module (TPM) device that is coupled to the processing system using the secret, challenge information that is configured to allow the TPM device to retrieve the secret from the challenge information in response to the receiving a platform owner authentication value;
• provide, via a user interface subsystem that is coupled to the processing system during runtime operations for the IHS, the challenge information;
• receive, via the user interface subsystem, a BIOS authentication request;
• receive, via a user interface subsystem during the runtime operations for the IHS and subsequent to providing the challenge information, the secret;
• and
• modify, during the runtime operations for the IHS in response to receiving the BIOS authentication request and the secret, at least one of the plurality of BIOS settings.

A method for authenticating the modification of Basic Input/Output System (BIOS) settings during runtime of a computing device, comprising:

• generating, by a Basic Input/Output System (BIOS) subsystem, a secret;
• creating, by the BIOS subsystem with a Trusted Platform Module (TPM) device using the secret, challenge information that is configured to allow the TPM device to retrieve the secret from the challenge information in response to the receiving the platform owner authentication value;
• providing, by the BIOS subsystem via a user interface subsystem during runtime operations for the computing device, the challenge information;
• receiving, by the BIOS subsystem via the user interface subsystem during runtime operations for a computing device that includes the BIOS subsystem, a BIOS authentication request;
• receiving, by the BIOS subsystem via the user interface subsystem during the runtime operations for the computing device and subsequent to providing the challenge information, the secret;
• and
• modifying, by the BIOS subsystem during the runtime operations for the computing device in response to receiving the BIOS authentication request and the secret, at least one of the plurality of BIOS settings.