Signed Firmware Manifest Validation for Offline Secure Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing firmware update systems face challenges in ensuring the authenticity of firmware updates without network access, particularly in environments where external validation by a certificate authority is not possible, leading to potential risks of nonsecure updates that can compromise hardware components.
Innovation Solution
Implementing a remote access controller with digital signing and manifesting firmware updates, ensuring compatibility through a digitally signed firmware manifest, and preventing nonsecure updates by replacing or deleting incompatible firmware without network access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If firmware updates are applied to hardware components of an IHS, then the capabilities and security of the hardware component are improved, but the IHS experiences downtime and performance degradation
Solution Approach 1:
The patent applies preliminary action by creating a validated firmware update package before the actual update is needed. The system receives, validates, and packages firmware updates in advance while the IHS is operational, so that when an update is required, the pre-validated package can be applied immediately without downtime. This is achieved through the firmware validation service that validates updates against the hardware component and creates a packaged update ready for deployment.
2Adaptability or versatility
If firmware updates are applied without external network access, then the IHS can operate in isolated environments, but the authenticity and security of firmware updates cannot be validated
Solution Approach 1:
The system performs preliminary validation of firmware updates against the hardware component database and compatibility information before deployment. This advance validation ensures authenticity and security even when the IHS operates in isolated environments without external network access, as the validation data is cached locally in the hardware component database.
Solution Approach 2:
The patent introduces an intermediary firmware validation service that acts as a mediator between the firmware update source and the hardware component. This service validates updates using the hardware component database as an intermediary reference, ensuring authenticity without requiring direct external network access during operation. The validation service cross-references updates against stored hardware component information to verify compatibility and authenticity.
3Reliability
If firmware updates are validated against hardware component database, then the compatibility and security of updates are ensured, but the complexity of the update management system increases
Solution Approach 1:
The firmware validation service performs multiple functions using a single integrated system: it validates firmware authenticity, checks compatibility with hardware components, creates packaged updates, and manages the update deployment process. This multi-functionality reduces the need for separate complex systems for each task, thereby managing complexity while ensuring reliability through comprehensive validation.
Data Source
AI summary
Systems and methods prevent nonsecure updates to firmware of an IHS (Information Handling System). During factory provisioning of the IHS, a manifest of firmware loaded for operating a hardware component of the IHS is digitally signed by a remote access controller of the IHS, and the signed manifest is stored to the IHS. Once the IHS has been deployed and during an interval where the IHS does not have access to external networks by which to validate a received firmware update, the signed manifest of loaded firmware is retrieved and used to determine whether the received firmware update is compatible with the loaded firmware of the hardware component. When the update is compatible with the loaded firmware, at least a portion of the loaded firmware is replaced with the firmware update and an updated manifest is digitally signed to reflect availability of the update for use by the hardware component.