System and method for fuse enablement of a secure client hosted virtualization in an information handling system
A client hosted virtualization system includes a processor to execute code, a non-volatile memory, and a switch. The memory includes code to implement a basic input/output system (BIOS) for the CHVS, and code to implement a virtualization manager. The virtualization manager is operable to initialize the CHVS, authenticate a virtual machine image associated with a virtual machine, and launch the virtual machine on the CHVS. The switch is operable to select one of a first state and a second state. The processor operates to execute the BIOS code when the switch is in the first state and to execute the virtualization manager code when the switch is in the second state.
1. A client hosted virtualization system (CHVS) comprising:
a processor to execute code;
a non-volatile memory including:
first code to implement a basic input/output system to initialize the CHVS; and
second code to implement a virtualization manager operable to:
initialize the CHVS;
authenticate a virtual machine image associated with a virtual machine; and
launch the virtual machine on the CHVS based on the virtual machine image; and
a switch operable to select one of a first state and a second state;
wherein the processor operates to execute the first code and not the second code in response to the switch being in the first state, and execute the second code and not the first code in response to the switch being in the second state.
2. The CHVS of claim 1 , wherein:
the switch is initially in the first state;
the switch is toggled to the second state; and
after being toggled to the second state, the switch is permanently in the second state.
3. The CHVS of claim 2 , wherein the switch comprises a write-once device.
4. The CHVS of claim 3 , wherein:
the write-once device comprises a fuse; and
toggling from the first state to the second state comprises blowing the fuse.
5. The CHVS of claim 3 , wherein:
the write-once device comprises a programmable read-only memory; and
toggling from the first state to the second state comprises setting a particular location in the programmable read-only memory.
6. The CHVS of claim 2 , wherein the non-volatile memory further comprises third code to implement the switch.
7. The CHVS of claim 6 , further comprising:
a trusted platform module;
wherein in implementing the switch, the third code is operable to direct the trusted platform module to authenticate a first state authentication certificate that implements the first state, and to authenticate a second state authentication certificate that implements the second state.
8. The CHVS of claim 2 , wherein the non-volatile memory further comprises third code to implement a switch toggle operation, the switch toggle operation being operable to provide a user selectable option to toggle the switch from the first state to the second state.
9. The CHVS of claim 8 , wherein the third code is executed only on a first power up of the CHVS.
10. The CHVS of claim 8 , wherein the third code is executed in response to a user request.
11. A method of providing a client hosted virtualization system (CHVS), comprising:
storing first code in a non-volatile memory of the CHVS to implement a basic input/output system to initialize the CHVS;
storing second code in the non-volatile memory, the second code being operable to:
initialize the CHVS;
authenticate a virtual machine image associated with a virtual machine; and
launch the virtual machine on the CHVS based on the virtual machine image;
determining if a switch of the CHVS is in a first state or a second state;
executing the first code to the exclusion of the second code if the switch is in the first state; and
executing the second code to the exclusion of the first code if the switch is in the second state.
12. The method of claim 11 , further comprising:
setting the switch to the first state at a first time; and
permanently setting the switch to the second state at a second time, the second time being after the first time.
13. The method of claim 12 , wherein:
the switch comprises a fuse; and
in permanently setting the switch to the second state, the method further comprises blowing the fuse.
14. The method of claim 12 , wherein:
the switch comprises a programmable read-only memory; and
in permanently setting the switch to the second state, the method further comprises setting a particular location in the programmable read-only memory.
15. The method of claim 12 , wherein in determining if the switch is in a first state or a second state, the method further comprises:
directing a trusted platform module of the CHVS to authenticate a state authentication certificate; and
determining if the state authentication certificate indicates the first state or the second state.
16. The method of claim 12 , further comprising:
providing a user selectable option to toggle the switch from the first state to the second state; and
receiving a selection to toggle the switch from the first state to the second state;
wherein permanently setting the switch to the second state is in response to receiving the selection.
17. Machine-executable code for a client hosted virtualization system, wherein the machine-executable code is embedded in a non-transitory storage medium and includes instructions for carrying out a method, the method comprising:
storing first code in a non-volatile memory of the CHVS to implement a basic input/output system to initialize the CHVS;
storing second code in the non-volatile memory, the second code being operable to:
initialize the CHVS;
authenticate a virtual machine image associated with a virtual machine; and
launch the virtual machine on the CHVS based on the virtual machine image;
setting a switch of the CHVS to a first state at a first time;
permanently setting the switch to a second state at a second time, the second time being after the first time;
determining if the switch is in the first state or the second state;
executing the first code to the exclusion of the second code in response to determining that the switch is in the first state; and
executing the second code to the exclusion of die first code in response to determining that the switch is in the second state.
18. The machine-executable code of claim 17 , wherein:
the switch comprises a fuse; and
in permanently setting the switch to the second state, the method further comprises blowing the fuse.
19. The machine-executable code of claim 17 , wherein:
the switch comprises a programmable read-only memory; and
in permanently setting the switch to the second state, the method further comprises setting a particular location in the programmable read-only memory.
20. The machine-executable code of claim 17 , wherein the method further comprises:
providing a user selectable option to toggle the switch from the first state to the second state; and
receiving a selection to toggle the switch from the first state to the second state;
wherein permanently setting the switch to the second state is in response to receiving the selection.