BIOS Engine Configuration Modification Audit System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The lack of capability to audit configuration modifications made in a BIOS setup environment prevents subsequent audits of component device configurations, leading to inefficient troubleshooting, especially in scenarios where the user is not the owner of the computing device.
Innovation Solution
An Information Handling System (IHS) with a BIOS processing system and a BIOS memory system that detects component device configuration modifications, generates modification information, and stores it in a non-volatile storage device, enabling audits of configuration changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If configuration modifications are made in BIOS setup environment, then component device configuration is updated, but the ability to audit configuration modifications is lost
Solution Approach 1:
The system performs preliminary actions by capturing configuration modification information at the time the modification is made in the BIOS setup environment. The BIOS engine detects the modification, captures details including timestamp and user identification, and stores this information in non-volatile storage before the system exits the setup environment. This ensures audit information is preserved without interfering with the configuration update process.
Solution Approach 2:
The BIOS engine acts as an intermediary between the configuration modification process and the audit storage system. It intercepts configuration changes, processes them through the capture routine, and stores the audit information in non-volatile storage. This intermediary mechanism allows configuration modifications to proceed normally while simultaneously preserving audit information for later review.
2Ease of operation
If conventional BIOS setup environment is used, then configuration modification is simple, but troubleshooting efficiency deteriorates due to lack of audit capability
Solution Approach 1:
The system implements feedback by automatically capturing and storing configuration modification information with timestamps and user identification. This creates an audit trail that provides feedback about what changes were made, when, and by whom. During troubleshooting, this feedback information allows rapid identification of problematic changes without requiring time-consuming manual investigation, thereby maintaining operational simplicity while improving troubleshooting efficiency.
3Adaptability or versatility
If user is not the owner of computing device, then device utilization is maximized, but accountability for configuration modifications is reduced
Solution Approach 1:
The system performs preliminary action by capturing user identification information at the time of configuration modification. The BIOS engine obtains user identification through various methods (login credentials, hardware identifiers, session information) and stores this information alongside the configuration change details in non-volatile storage. This preliminary capture of accountability information ensures that even when users are not device owners, their actions are properly attributed and can be held accountable for configuration changes.
Data Source
AI summary
A BIOS setup environment configuration modification audit system includes a BIOS device that is included in a computing device and that is coupled to a component device in the computing device. The BIOS device enters a BIOS setup environment for the computing device and, while in the BIOS setup environment, detects component device configuration modification(s) to a configuration of the component device. The BIOS device then generates component device configuration modification information for the component device configuration modification(s) to the configuration of the component device, and provides the component device configuration modification information for storage in a non-volatile storage device that may be included in the BIOS device, a Baseboard Management Controller (BMC) device coupled to the BIOS device, or a network-connected device coupled to the BIOS device, any of which may provide access to that component device configuration modification information in response to a component device configuration audit request.