Remote Access Controller Firmware Authentication With Zero-Downtime Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems experience significant downtime during firmware updates for hardware components in Information Handling Systems (IHSs), as they require components to be halted until the update is completed, which is inefficient for high-availability systems.
Innovation Solution
Implement a remote access controller that supports remote management of IHSs, enabling firmware updates without rebooting the system by integrating update validation into the authentication process, ensuring all components are validated and updated before initialization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If firmware updates are performed by halting the hardware component until the update is completed, then firmware integrity is ensured, but system downtime increases
Solution Approach 1:
The patent applies preliminary action by performing firmware validation and authentication during the hardware component initialization phase, before the component is fully operational. The remote access controller validates the firmware binary against a golden image and checks digital signatures during boot-up, ensuring firmware integrity is established beforehand. This allows the hardware component to be updated without halting it during operation, as the validation occurs in advance during the authentication process.
Solution Approach 2:
The patent introduces a remote access controller as an intermediary between the hardware component and the firmware update process. This intermediary controller handles the firmware validation, authentication, and update coordination independently from the hardware component being updated. The remote access controller can validate firmware and manage updates without requiring the hardware component to be halted, thereby maintaining system availability while ensuring firmware integrity through the intermediary's coordination.
2Productivity
If firmware updates are performed during system operation, then system availability is maintained, but authentication complexity increases
Solution Approach 1:
The patent merges the firmware authentication process with the hardware component initialization process. The remote access controller performs firmware validation, digital signature verification, and version checking as integrated steps during the initial authentication sequence. By combining these authentication functions into a unified process that occurs during component bring-up, the system maintains high availability while managing authentication complexity through consolidation rather than separate, redundant validation steps.
3Reliability
If firmware is validated against a golden image with digital signature, then firmware authenticity is ensured, but validation time increases
Solution Approach 1:
The patent applies preliminary action by performing the computationally intensive firmware validation and digital signature verification during the hardware component initialization phase, before the component begins full operational duties. The remote access controller validates the firmware binary against the golden image and verifies digital signatures in advance, during the authentication sequence. This timing ensures firmware authenticity is established beforehand, and the validation time does not impact ongoing system operations, as the verification completes during the initial bring-up process.
Data Source
AI summary
Systems and methods update firmware during authentication of a hardware component of an IHS (Information Handling System), where firmware updates are managed by a remote access controller that provides remote management of the IHS. The remote access controller calculates a measurement based on firmware loaded for use by a hardware component of the IHS. Based on the measurement, an integrity of the firmware loaded for use by the hardware component is validated against a reference signature. When the integrity of the firmware is not validated, the hardware component is quarantined. When the integrity of the firmware is successfully validated, the remote access controller determines whether a firmware update is required for the firmware loaded by the hardware component. When a firmware update is required, an integrity of the updated firmware is validated, the updated firmware is loaded by the hardware component and further initialization of the hardware component is allowed.