Dual BIOS Flash Chip Failover via BMC Switching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing PC system architecture is vulnerable to BIOS corruption during updates, leading to system inoperability and requiring physical replacement of the BIOS flash chip, which is costly and mechanically unreliable.
Innovation Solution
Implementing a dual BIOS flash chip system with a main BIOS and a backup BIOS, where a Board Management Controller (BMC) manages switching between them transparently, allowing for automatic failover and recovery without physical replacement, using a watchdog timer and reset counter to detect corruption and switch to the backup BIOS.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single BIOS flash chip is used to store the BIOS image, then the device complexity is reduced, but the reliability deteriorates because the BIOS may become corrupted during update processes
Solution Approach 1:
The BIOS system is segmented into two separate flash chips: a primary BIOS flash chip and a backup BIOS flash chip. Each chip stores a complete BIOS image, allowing the system to operate from either chip. This segmentation provides redundancy and enables failover capability, resolving the reliability issue while maintaining manageable complexity through modular design
Solution Approach 2:
The system changes the parameter of BIOS storage from a single copy to dual copies with different operational states. The primary chip is enabled for normal operation while the backup chip is disabled but ready to take over. This parameter change (from single to dual with enable/disable states) provides fault tolerance without significantly increasing system complexity
2Reliability
If the BIOS flash chip is physically replaced to restore a corrupted BIOS image, then the BIOS reliability is restored, but the ease of operation deteriorates due to added cost and mechanical failure risks
Solution Approach 1:
A backup BIOS image is prepared and stored in a second flash chip before any corruption occurs. This preliminary action ensures that when the primary BIOS becomes corrupted, the system can immediately switch to the pre-prepared backup without requiring physical replacement or external restoration procedures
Solution Approach 2:
A complete copy of the BIOS image is maintained in the backup flash chip. This copying strategy ensures that an identical, functional BIOS image is available for immediate use if the primary BIOS fails, eliminating the need for physical chip replacement and simplifying restoration to a simple switch operation
3Reliability
If a dual BIOS flash chip system is implemented with automatic failover capability, then the reliability is improved through redundancy, but the device complexity increases due to additional components and switching mechanisms
Solution Approach 1:
A Board Management Controller (BMC) acts as an intermediary that manages the dual BIOS flash chip system. The BMC monitors BIOS health, detects corruption, and automatically switches between the primary and backup chips. This intermediary simplifies the complexity by centralizing the switching logic in a dedicated controller rather than requiring complex circuitry in the BIOS path itself
Solution Approach 2:
The manual mechanical operation of physically replacing BIOS chips is substituted with an automated electronic switching mechanism controlled by the BMC. This substitution eliminates mechanical failures associated with physical replacement and reduces operational complexity by automating the failover process through software-based detection and switching
4Productivity
If BIOS updates are performed with a single flash chip, then the manufacturing process is simple, but the productivity deteriorates due to system downtime and failed updates
Solution Approach 1:
Before updating the primary BIOS, the system prepares the backup flash chip with the new BIOS image in advance. This preliminary action ensures that if the update to the primary BIOS fails or corrupts it, the system can immediately switch to the pre-prepared backup, guaranteeing update success without requiring re-flashing or external intervention
Solution Approach 2:
The system can discard the corrupted primary BIOS by switching to the backup chip, and then recover by copying the good BIOS image from the backup to the primary chip when the system is operational. This discard and recover strategy improves update success rates by isolating failed updates from affecting system operation
Data Source
AI summary
Systems and methods for BIOS failover. A processor reset is detected and a timer is set to expire after a predetermined time corresponding to a time to complete loading a first BIOS image from a first BIOS chip. Loading of the first BIOS image is initiated and it is determined whether the first BIOS image loaded successfully before the timer expired. If the timer expires before the first BIOS image is loaded successfully, loading is switched to a second BIOS image from a second BIOS chip. According to another aspect, loading of a first BIOS image from a first BIOS chip is initiated and a reset of a processor is detected. A reset counter is incremented in response to detecting a reset of the processor and loading is switched to a second BIOS image from a second BIOS chip when the reset counter reaches a reset threshold.