BMC-Based Firmware Setup Unlocking With MFA Recovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Resetting a forgotten firmware setup utility password in computer systems typically requires physical access and results in clearing all settings, posing security challenges, especially in edge and IaaS environments with less control over access and higher risks of unauthorized tampering.
Innovation Solution
A method and system using multi-factor authentication (MFA) involving a baseboard management controller (BMC) to send a nonce code to a registered destination, allowing unlocking of the firmware setup utility without entering a password, by combining BMC login credentials and a nonce code entered via a web interface.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If physical access to reset feature (electrical jumper) is used to reset firmware setup utility password, then password can be reset, but all firmware settings are cleared and security control is reduced
Solution Approach 1:
The patent introduces an intermediary authentication mechanism (nonce code sent to registered email address) that mediates between the user and the firmware setup utility. This intermediary process allows password reset without direct physical access to reset jumpers, preventing accidental clearing of firmware settings while maintaining the ability to recover forgotten passwords.
2Reliability
If firmware setup utility password is required for security, then unauthorized access is prevented, but access complexity increases and legitimate users face additional barriers
Solution Approach 1:
The patent implements preliminary action by requiring users to pre-register their email address in the firmware setup utility before needing password recovery. This preliminary registration creates a recovery pathway that simplifies future access while maintaining security, as the email-based nonce code authentication is prepared in advance rather than requiring complex procedures when access is needed.
3Ease of operation
If traditional password-based authentication is used for firmware setup utility, then simple authentication is provided, but security vulnerabilities exist in edge and IaaS environments with unauthorized access risks
Solution Approach 1:
The patent introduces an intermediary authentication layer using email-based nonce code verification. Instead of relying solely on traditional password authentication, the system mediates the authentication process by sending a time-limited nonce code to the user's registered email address. This intermediary mechanism enhances security in edge and IaaS environments by adding a factor that is independent of the firmware password while maintaining user convenience through automated email delivery.
4Ease of operation
If BMC is used to send nonce code through network interface controller, then remote authentication is enabled, but system complexity increases
Solution Approach 1:
The patent leverages the existing BMC (Baseboard Management Controller) which is a standard component in modern server systems for out-of-band management. By utilizing the BMC's existing network interface controller and email capabilities, the patent enables remote authentication without adding dedicated hardware components. The BMC's multi-functional nature allows it to handle both traditional management tasks and the new nonce code distribution function, minimizing additional system complexity.
Data Source
AI summary
A method for unlocking a firmware setup utility of a computer server without a firmware setup utility user password. The method includes booting the server to a firmware setup utility interface and receiving a user request to unlock the firmware setup utility without the password. The method further includes receiving, via a web interface to a baseboard management controller (BMC) of the server, login credentials for accessing a BMC configuration, wherein the login credentials are authenticated by the BMC. The firmware setup utility causes, in response to the request, the BMC to send a nonce code to a registered destination address stored by the BMC. User input containing the nonce code is received through the web interface to the BMC, and the firmware setup utility is unlocked in response to determining that the nonce code received through the BMC web interface matches the nonce code in the message.