BMC BIOS Validation During Reset for Secure Server Boot

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing server systems lack a secure mechanism to validate the Basic Input/Output System (BIOS) firmware during the booting process, which can lead to potential security breaches and compromised system integrity.

Innovation Solution

A Baseboard Management Controller (BMC) is used to hold the host computer in a reset state and validate the BIOS image using a public key/private key pair, ensuring the BIOS image is authentic before releasing the reset signal to allow the boot process to continue.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the BIOS image is validated using public key cryptography before booting, then system security and integrity are improved, but the boot process complexity and validation time increase

Engineering Contradiction:

Improvesystem integrityVSAvoidvalidation process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The BMC performs cryptographic validation of the BIOS image before the host computer completes its boot process. The public key is embedded in the BMC firmware, and the validation occurs in advance (during reset state) so that when the host boots, the BIOS is already verified and ready for execution, preventing compromised code from running.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The BMC acts as an intermediary between the storage device (where the BIOS image is stored) and the host computer (which will execute the BIOS). The BMC holds the host in reset state during validation, serving as a mediator that controls when the BIOS image is made available to the host, ensuring only validated images are executed.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If the host computer is held in reset state during BIOS validation, then validation security is improved, but boot time is increased

Engineering Contradiction:

Improvevalidation securityVSAvoidboot time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The BMC performs the time-consuming cryptographic validation operation during the reset state before the host computer initiates its full boot sequence. By completing validation in advance, the actual boot process can proceed faster without waiting for validation to complete during execution.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The BMC uses its own embedded public key and validation capabilities to verify the BIOS image independently, without requiring external intervention or waiting for host computer actions. The BMC autonomously performs validation and controls the reset state, optimizing the timing of the validation operation.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS20250356016A1BIOS verification as part of HROT in BMC firmware in a secured server system

Publication Date: 2025.11.20 AMERICAN MEGATRENDS

AI summary

A BMC holds a host computer in a reset state by asserting a reset signal to the host computer. The BMC accesses at least a part of a BIOS image of the host computer from a storage device shared between the BMC and the host computer while the host computer is held in the reset state. The BIOS image is protected based on a private key of a public key/private key pair. The BMC validates at least the part of the BIOS image based on a public key of the public key/private key pair. The BMC releases the reset signal to enable the host computer to start a boot process upon successful validation of at least the part of the BIOS image.