BMC Secure Boot Validation With Automatic Recovery Firmware Fallback
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing server systems lack a convenient mechanism for updating firmware of component devices, particularly for systems without direct hardware capability to access SPI storages, necessitating a method for validating and executing boot programs from recovery firmware images.
Innovation Solution
A Baseboard Management Controller (BMC) validates boot programs using hardware components, switching to recovery firmware if the active firmware is not validated, ensuring secure and reliable booting processes by employing public key cryptography and hash validation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If the system uses active firmware image for booting, then the booting process is fast, but the system reliability is reduced because there is no backup mechanism
Solution Approach 1:
The patent implements a recovery firmware image as a backup mechanism that is prepared in advance. When the active firmware image fails validation or booting, the system automatically switches to the recovery firmware image, cushioning against the harmful effects of firmware failure and ensuring continuous system operation.
Solution Approach 2:
The system changes the firmware image parameter from a single active image to a dual-image configuration (active and recovery). This parameter change enables the system to switch between different firmware images based on validation results, improving reliability while maintaining booting speed through the pre-configured recovery mechanism.
2Reliability
If the system validates firmware images using hardware root of trust, then the security is improved, but the device complexity increases
Solution Approach 1:
The patent introduces a validation mechanism that acts as an intermediary between the firmware image and the booting process. This intermediary validates the firmware image against a hardware root of trust before allowing booting, ensuring security without requiring complex hardware modifications. The validation logic is implemented as a manageable process layer.
3Ease of repair
If the system provides recovery firmware mechanism, then the ease of repair is improved, but the device complexity increases
Solution Approach 1:
The system implements self-service firmware recovery where the BMC automatically validates and switches between active and recovery firmware images without requiring manual intervention. The validation and switching processes are handled autonomously by the system, improving ease of repair while managing complexity through automation.
Solution Approach 2:
The recovery firmware image is prepared and validated in advance before the actual booting process. This preliminary action ensures that when the active firmware fails, the recovery firmware is ready for immediate deployment, simplifying the repair process while managing complexity through pre-computed validation results.
Data Source
AI summary
In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus is a BMC. The BMC validates a first boot program from an active firmware image based on a hardware component of the BMC. The BMC validates a first boot program from a recovery firmware image based on the hardware component, when the first boot program of the active firmware image is not validated. The BMC executes the first boot program from the recovery firmware image, when the first boot program from the recovery firmware image is validated.