Component update using management engine
Embodiments of systems and methods for applying a component update using a management engine are disclosed. A computing device may include a management engine to store a bootable image containing an update for a component of the computing device in a secured memory location and configure the computing device to boot from the bootable image. Such configuration may include configuring the computing device for integrated device electronics redirection (IDE-R) to the bootable image. A firmware update server may generate the bootable image containing the update, digitally sign the bootable image, and transmit the bootable image to the computing device for the update to be applied. The firmware update server may sign the bootable image with an original equipment manufacturer key, such as a firmware signing key. The firmware update server may notify all computing devices connected to a network that the update is available. Other embodiments are described and claimed.
1. One or more non-transitory, computer-readable storage media comprising a plurality of instructions that in response to being executed cause a computing device to:
generate a bootable image containing an update for a component of the remote computing device, wherein the bootable image is bootable by the remote computing device, wherein the component comprises a data storage device of the remote computing device, wherein the update comprises a firmware update for the data storage device, and wherein data stored by the data storage device is inaccessible to other components of the remote computing device during application of the firmware update;
digitally sign the bootable image using an original equipment manufacturer (OEM) key associated with a manufacturer of the component of the remote computing device to be updated;
notify the remote computing device that the update is available;
receive an update request from the remote computing device;
transmit the bootable image to the remote computing device in response to receipt of the update request; and
receive, in response to transmission of the bootable image, a notification from the remote computing device, wherein the notification indicates that the remote computing device successfully applied the update.
2. The one or more non-transitory, computer-readable storage media of claim 1 , wherein to digitally sign the bootable image using the OEM key comprises to digitally sign the bootable image using a firmware signing key (FWSK) generated with an RSA encryption algorithm.
3. The one or more non-transitory, computer-readable storage media of claim 1 , further comprising a plurality of instructions that in response to being executed cause the computing device to notify all remote computing devices connected to a network that the update is available.
4. A method for packaging an update for a remote computing device, the method comprising:
generating, by a computing device, a bootable image containing an update for a component of the remote computing device, wherein the bootable image is bootable by the remote computing device, wherein the component comprises a data storage device of the remote computing device, wherein the update comprises a firmware update for the data storage device, and wherein data stored by the data storage device is inaccessible to other components of the remote computing device during application of the firmware update;
digitally signing, by the computing device, the bootable image using an original equipment manufacturer (OEM) key associated with a manufacturer of the component of the remote computing device to be updated;
notifying, by the computing device, the remote computing device that the update is available;
receiving, by the computing device, an update request from the remote computing device;
transmitting, by the computing device, the bootable image to the remote computing device in response to receiving the update request; and
receiving, by the computing device in response to transmitting the bootable image, a notification from the remote computing device indicating that the remote computing device successfully applied the update.
5. The method of claim 4 , wherein digitally signing the bootable image using the OEM key comprises digitally signing the bootable image using a firmware signing key (FWSK) generated with an RSA encryption algorithm.
6. The method of claim 4 , further comprising notifying, by the computing device, all remote computing devices connected to a network that the update is available.
7. A computing device for packaging an update for a remote computing device, the computing device comprising:
a processor; and
one or more computer-readable storage media comprising a plurality of instructions that in response to being executed by the processor cause the computing device to:
generate a bootable image containing an update for a component of the remote computing device, wherein the bootable image is bootable by the remote computing device, wherein the component comprises a data storage device of the remote computing device, wherein the update comprises a firmware update for the data storage device, and wherein data stored by the data storage device is inaccessible to other components of the remote computing device during application of the firmware update;
digitally sign the bootable image using an original equipment manufacturer (OEM) key associated with a manufacturer of the component of the remote computing device to be updated;
notify the remote computing device that the update is available;
receive an update request from the remote computing device;
transmit the bootable image to the remote computing device in response to receipt of the update request; and
receive, in response to transmission of the bootable image, a notification from the remote computing device, wherein the notification indicates that the remote computing device successfully applied the update.
8. The computing device of claim 7 , wherein to digitally sign the bootable image using the OEM key comprises to digitally sign the bootable image using a firmware signing key (FWSK) generated with an RSA encryption algorithm.
9. The computing device of claim 7 , wherein the one or more computer-readable storage media further comprises a plurality of instructions that in response to being executed cause the computing device to notify all remote computing devices connected to a network that the update is available.