Methods for firmware signature
A method for installing embedded firmware is provided. The method includes generating one or more firmware file instances and generating one or more digital certificate instances that are separate instances from the firmware file instances. The method includes associating the one or more digital certificate instances with the one or more firmware file instances to facilitate updating signature-unaware modules with signature-aware firmware or to facilitate updating signature-aware modules with signature-unaware firmware.
1. A method, comprising:
receiving, by an industrial device, signature unaware firmware code that is not digitally signed;
verifying, by the industrial device via boot code, that the signature unaware firmware code is received from a proxy module located remotely from the industrial device, where the proxy module has verified a validity of the signature unaware firmware code based on a certificate generated for the signature unaware firmware code to determine that the signature unaware firmware code is valid; and
installing, by the industrial device via the boot code, the signature unaware firmware code on the industrial device in response to the verifying.
2. The method of claim 1 , wherein the proxy module intercepted a request to the industrial device to install the signature unaware firmware code on the industrial device.
3. The method of claim 1 , wherein the proxy module verified a hardware revision in the certificate matches a hardware revision of the industrial device.
4. A non-transitory computer-readable medium having instructions stored thereon that, in response to execution, cause an industrial device to perform operations comprising:
receiving signature unaware firmware code that is not digitally signed;
verifying, via boot code, that the signature unaware firmware code is received from a proxy module located remotely from the industrial device, where the proxy module has verified a validity of the signature unaware firmware code based on a certificate generated for the signature unaware firmware code to determine that the signature unaware firmware code is valid; and
installing, via the boot code, the signature unaware firmware code on the industrial device in response to the verifying.
5. The non-transitory computer-readable medium of claim 4 , wherein the proxy module intercepted a request to the device to install the signature unaware firmware code on the industrial device.
6. The non-transitory computer-readable medium of claim 4 , wherein the proxy module verified a hardware revision in the certificate matches a hardware revision of the industrial device.
7. A system, comprising:
an industrial device configured to receive signature unaware firmware code that is not digitally signed; and
a boot code installed on the industrial device configured to:
verify that the signature unaware firmware code is received from a proxy module located remotely from the industrial device, where the proxy module has verified a validity of the signature unaware firmware code based on a certificate generated for the signature unaware firmware code to determine that the signature unaware firmware code is valid, and
install the signature unaware firmware code on the industrial device in response to the verification of the signature unaware firmware code.
8. The system of claim 7 , wherein the proxy module intercepted a request to the device to install the signature unaware firmware code on the industrial device.
9. The system of claim 7 , wherein the proxy module verified a hardware revision in the certificate matches a hardware revision of the industrial device.