Techniques and system for updating resources stored in firmware

An electronic device, comprising:

• a processor;
• and
• memory connected to the processor;
• the memory comprising instructions that when executed by the processor cause the device to:
• receive from a server, a signed server key, while the device is booted;
• reboot a first time;
• verify the signed server key during a DXE (driver execution environment) phase of firmware in the device during a boot process of the device;
• send a nonce to the server while the device is booted, the nonce being encrypted using the signed server key;
• receive, while the device is booted, a secure message from the server that includes a first portion with the binary for updating firmware and a second portion that is based on a hash of the nonce;
• reboot a second time;
• verify the secure message during the DXE phase of the firmware during another boot process of the device;
• and
• copies the binary into an ACPI table.

A method for securely updating firmware of a device comprising the steps of:

• receiving from a server, a signed server key, while the device is booted;
• rebooting the device a first time;
• verifying the signed server key during a DXE (driver execution environment) phase of firmware in the device during a boot process of the device;
• sending a nonce to the server while the device is booted, the nonce being encrypted using the signed server key;
• receiving, while the device is booted, a secure message from the server that includes a first portion with binary and a second portion that is based on a hash of the nonce;
• rebooting the device a second time;
• verifying the secure message during the DXE phase of the firmware during another boot process of the device;
• and
• copies the binary into an ACPI table.