公开(公告)号：US20170109531A1

公开(公告)日：2017-04-20

申请号：US14883124

申请日：2015-10-14

Applicant: Quanta Computer Inc.

Inventor： Wei-Chun WANG ,  Wei-Yu CHIEN

IPC: G06F21/57 ,  H04L9/32 ,  H04L29/06

CPC classification number: G06F21/575 ,  G06F21/572 ,  H04L9/3234 ,  H04L9/3247 ,  H04L63/1408 ,  H04L63/20

Abstract: Various embodiments of the present technology provide methods for activating a security module of a rack system prior to the loading of an operating system. The security module can be configured to examine server platform security, communicate with an administrator through a baseboard management controller (BMC), certify signatures of firmware pieces on a motherboard of the rack system, exclude malware by isolating unsigned UEFI images, examine a signature list and security key installed on the motherboard, and/or report status of security management to a controller of the rack system (e.g., BMC). When the security module determines that an uncertified firmware or a bootable storage with malware is loaded onto the rack system, the security module can stop process(es) associated with the uncertified firmware and/or the bootable storage, and subsequently send a report the administrator.