System and method for securing embedded controller communications by providing a security handshake
An information handling system includes a processor operable to receive a system management interrupt, and an embedded controller coupled to the processor via a primary interface and via a system management interrupt interface. The embedded controller receives a command to enable address decoding from the processor via the primary interface, sends the system management interrupt via the system management interrupt interface in response to receiving the command, and receives an indication from the processor via the primary interface, the indication including a determination if the processor was operating in a system management mode when the processor sent the command.
1. An information handling system, comprising:
a processor including a primary interface and a system management interrupt interface, wherein the processor receives a system management interrupt via the system management interface; and
an embedded controller coupled to the processor via the primary interface and via the system management interrupt interface, wherein the embedded controller:
receives, via the primary interface, a command from the processor to enable address decoding;
sends, via the system management interrupt interface, the system management interrupt to the processor in response to receiving the command; and
receives, via the primary interface, an indication from the processor in response to sending the system management interrupt, wherein the indication indicates whether or not the processor was operating in a system management mode when the processor sent the command.
2. The information handling system of claim 1 , wherein the embedded controller further receives a management transaction in response to the indication that the processor was operating in a system management mode.
3. The information handling system of claim 1 , wherein the embedded controller further disables address decoding in response to the indication that the processor was not operating in a system management mode.
4. The information handling system of claim 1 , further comprising:
a memory including an address enable flag, wherein the processor determines whether or not the processor was operating in the system management mode based upon the address enable flag.
5. The information handling system of claim 1 , wherein the embedded controller includes a security mode.
6. The information handling system of claim 5 , wherein the embedded controller sends the system management interrupt when the embedded controller is operating in the security mode.
7. The information handling system of claim 5 , wherein, prior to sending the command, the processor:
disables address encoding in the embedded controller; and
sets the embedded controller to operate in the security mode.
8. The information handling system of claim 1 , wherein the system management interrupt includes information indicating that the embedded controller received the command to enable address decoding.
9. An information handling system, comprising:
a processor including a primary interface and a system management interrupt interface, wherein the processor receives a system management interrupt via the system management interface; and
an embedded controller coupled to the processor via the primary interface and via the system management interrupt interface, wherein the embedded controller:
receives, via the primary interface, a management transaction from the processor; and
in response to receiving the management transaction:
sends, via the system management interrupt interface, a system management interrupt to the processor; and
receives, via the primary interface, an indication from the processor in response to the system management interrupt, wherein the indication indicates whether or not the processor was operating in a system management mode when the processor sent the management transaction.
10. The information handling system of claim 9 , wherein the embedded controller further executes the management transaction in response to the indication that the processor was operating in a system management mode.
11. The information handling system of claim 9 , wherein the embedded controller further drops the management transaction in response to the indication that the processor was not operating in a system management mode.
12. The information handling system of claim 9 , further comprising:
a memory including a management task record, wherein the processor determines whether or not the processor was operating in the system management mode based upon the management task record.
13. The information handling system of claim 9 , wherein the embedded controller includes a security mode.
14. The information handling system of claim 13 , wherein the embedded controller sends the system management interrupt when the embedded controller is operating in the security mode.
15. The information handling system of claim 13 , wherein, prior to sending the command, the processor:
disables address encoding in the embedded controller; and
sets the embedded controller to operate in the security mode.
16. The information handling system of claim 9 , wherein the system management interrupt includes information indicating that the embedded controller received management transaction.
17. A non-transitory computer-readable medium including code for performing a method, the method comprising:
receiving, at an embedded controller of an information handling system, from a processor of the information handling system, a command to configure address decoding, wherein the embedded controller is coupled to the processor via a primary interface and via a system management interrupt interface, and the command is received via the primary interface; and
in response to receiving the management transaction:
sending, via the system management interrupt interface, the system management interrupt to the processor in response to receiving the command; and
receiving, via the primary interface, an indication from the processor in response to the system management interrupt, wherein the indication indicates whether or not the processor was operating in a system management mode when the processor sent the command.
18. The non-transitory computer-readable medium of claim 17 , further comprising:
receiving, by the embedded controller, a management transaction in response to the indication that the processor was operating in a system management mode.
19. The non-transitory computer-readable medium of claim 17 , further comprising:
disabling address decoding by the embedded controller in response to the indication that the processor was not operating in a system management mode.
20. The non-transitory computer readable medium of claim 17 , wherein:
the embedded controller includes a security mode; and
the method further comprises sending the system management interrupt when the embedded controller is operating in the security mode.