Authorizing use of a test key signed build
View Patent ↗Methods, apparatuses, and computer program products for authorizing use of a test key signed build are provided. Embodiments include transmitting to an update provider system, unique data associated with a target system; receiving from the update provider system, a signed update capsule file; determining, by the target system, that a signature within the signed update capsule file is valid; in response to determining that the signature is valid, determining that the validation data within the signed update capsule file matches the unique data associated with the target system; and in response to determining that the validation data matches the unique data, determining that the target system is authorized to use a test key signed build to update the firmware of the target system.
1. A method comprising:
by computer program instructions on a computing system,
transmitting to an update provider system, unique data associated with the computing system;
receiving from the update provider system, a signed update capsule file, the signed update capsule file including:
a signature for validating the signed update capsule file;
validation data for comparing with the unique data of the computing system; and
a public test key for decrypting a test key signed build, wherein the test key signed build is encrypted using a private test key;
determining that the signature within the signed update capsule file is valid;
in response to determining that the signature is valid, determining that the validation data within the signed update capsule file matches the unique data associated with the computing system;
in response to determining that the validation data matches the unique data, transitioning from a use of a production key signed build to the test key signed build; and
determining that the computing system is authorized to use the test key signed build to update the firmware of the target system.
2. The method of claim 1 wherein determining that the signature within the signed update capsule file is valid includes using a public production key to validate the signature of the signed update capsule file.
3. The method of claim 1 further comprising in response to determining that the computing system is authorized to use the test key signed build to update the firmware of the computing system, updating the firmware of the computing system with the signed update capsule file and the test key signed build.
4. The method of claim 3 wherein updating the firmware of the computing system with signed update capsule file and the test key signed build includes using the public test key to decrypt the test key signed build.
5. The method of claim 1 wherein the signed update capsule file includes a fixed use attribute, the fixed use attribute limiting use of the test key signed build.
6. The method of claim 1 wherein the unique data includes at least one of an Trusted Platform Module (TPM) Endorsement Key (EK), a Machine Serial Number (MSN), and a Machine Type and Model Number (MTM).
7. An apparatus comprising a computer processor and a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:
transmitting to an update provider system, unique data associated with the computing system;
receiving from the update provider system, a signed update capsule file, the signed update capsule file including:
a signature for validating the signed update capsule file;
validation data for comparing with the unique data of the computing system; and
a public test key for decrypting a test key signed build, wherein the test key signed build is encrypted using a private test key;
determining that the signature within the signed update capsule file is valid;
in response to determining that the signature is valid, determining that the validation data within the signed update capsule file matches the unique data associated with the computing system;
in response to determining that the validation data matches the unique data, transitioning from a use of a production key signed build to the test key signed build; and
determining that the computing system is authorized to use the test key signed build to update the firmware of the computing system.
8. The apparatus of claim 7 wherein determining that the signature within the signed update capsule file is valid includes using a public production key to validate the signature of the signed update capsule file.
9. The apparatus of claim 7 further comprising computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of: in response to determining that the computing system is authorized to use the test key signed build to update the firmware of the computing system, updating the firmware of the computing system with the signed update capsule file and the test key signed build.
10. The apparatus of claim 9 wherein updating the firmware of the computing system with the test key signed build includes using the public test key to decrypt the test key signed build.
11. The apparatus of claim 7 wherein the signed update capsule file includes a fixed use attribute, the fixed use attribute limiting use of the test key signed build.
12. The apparatus of claim 7 wherein the unique data includes at least one of an Trusted Platform Module (TPM) Endorsement Key (EK), a Machine Serial Number (MSN), and a Machine Type and Model Number (MTM).
13. A computer program disposed upon a non-transitory computer readable medium, the computer program product comprising computer program instructions that, when executed, cause a computer to carry out the steps of:
transmitting to an update provider system, unique data associated with the computing system;
receiving from the update provider system, a signed update capsule file, the signed update capsule file including:
a signature for validating the signed update capsule file;
validation data for comparing with the unique data of the computing system; and
a public test key for decrypting a test key signed build, wherein the test key signed build is encrypted using a private test key;
determining that the signature within the signed update capsule file is valid;
in response to determining that the signature is valid, determining that the validation data within the signed update capsule file matches the unique data associated with the computing system;
in response to determining that the validation data matches the unique data, transitioning from a use of a production key signed build to the test key signed build; and
determining that the computing system is authorized to use the test key signed build to update the firmware of the computing system.
14. The computer program product of claim 13 wherein determining that the signature within the signed update capsule file is valid includes using a public production key to validate the signature of the signed update capsule file.
15. The computer program product of claim 13 further comprising computer program instructions that, when executed, cause a computer to carry out the steps of: in response to determining that the computing system is authorized to use the test key signed build to update the firmware of the computing system, updating the firmware of the computing system with the signed update capsule file and the test key signed build.
16. The computer program product of claim 15 wherein updating the firmware of the computing system with the signed update capsule file and the test key signed build includes using the public test key to decrypt the test key signed build.
17. The computer program product of claim 13 wherein the signed update capsule file includes a fixed use attribute, the fixed use attribute limiting use of the test key signed build.
18. The computer program product of claim 13 wherein the unique data includes at least one of an Trusted Platform Module (TPM) Endorsement Key (EK), a Machine Serial Number (MSN), and a Machine Type and Model Number (MTM).
19. The computer program product of claim 13 wherein the computer readable medium comprises a storage medium.