SECURING OPERATING SYSTEM CONFIGURATION USING HARDWARE

    公开(公告)号:US20180365426A1

    公开(公告)日:2018-12-20

    申请号:US15624970

    申请日:2017-06-16

    Abstract: A method, system, and computer program product includes receiving, in a booted state of a computing system, a request to load an operating system configuration. The method further includes storing, automatically in response to receiving the request, a digital key to authenticate the operating system configuration. The method further includes restarting the computing system. In response to restarting the computing system and while the computing system is in a pre-boot state, the method includes: validating that the digital key stored is one for a valid operating system configuration; receiving, from a user interface physically coupled to the computing system, a signal confirming the received request; authenticating, in response to receiving the signal, the operating system configuration using the digital key; and booting, in response to the authenticating, the operating system configuration.

    TECHNIQUES FOR COORDINATING DEVICE BOOT SECURITY

    公开(公告)号:US20180341774A1

    公开(公告)日:2018-11-29

    申请号:US15778980

    申请日:2015-12-24

    Abstract: Techniques for providing and maintaining protection of firmware routines that form part of a chain of trust through successive processing environments. An apparatus may include a first processor component (550); a volatile storage (562) coupled to the first processor component; an enclave component to, in a pre-OS operating environment, generate a secure enclave within a portion of the volatile storage to restrict access to a secured firmware loaded into the secure enclave; a first firmware driver (646) to, in the pre-OS operating environment, provide a first API to enable unsecured firmware to call a support routine of the secured firmware from outside the secure enclave; and a second firmware driver (647) to, in an OS operating environment that replaces the pre-OS operating environment, provide a second API to enable an OS of the OS operating environment to call the support routine from outside the secure enclave.

    BOOTING OF IHS FROM SSD USING PCIE
    68.
    发明申请

    公开(公告)号:US20180239609A1

    公开(公告)日:2018-08-23

    申请号:US15436727

    申请日:2017-02-17

    Abstract: Methods and systems are provided for initializing a host IHS (Information Handling System) that includes an SSD (solid state storage device) connected using PCIe (Peripheral Component Interconnect Express). The SSD detects the transfer of boot data from the host to the persistent storage of the SSD. The SSD marks the detected boot data for pre-fetching. When the host is booted, memory is allocated for the PCIe connection. During the resulting delay, the SSD pre-fetches the marked boot data from persistent storage to a portion of a volatile memory used by the SSD for storing a mapping of the boot data in persistent storage. Upon configuring the PCIe connection, the SSD is provides pre-fetched boot data to the host immediately, thus improving boot times. In certain scenarios, the SSD pre-fetches successive portions of the boot data and provides each pre-fetched portion of the boot data to the host.

Patent Agency Ranking