Basic input/output system (BIOS) security display
Methods and systems for generating and using a BIOS security display include determining whether a change in a BIOS user setting is associated with security of an information handling system. When the BIOS user setting is associated with security, a security level for the BIOS may be calculated based on weighted security values for BIOS user settings. Security levels for boot phases may also be individually calculated. The security levels may be displayed in the BIOS to the user when the BIOS user setting is changed.
1. A method comprising:
responsive to detecting a change in a user setting of a basic input/output system (BIOS) from an old value to a new value for an information handling system, determining whether the user setting is associated with security of the information handling system;
when the user setting is associated with security of the information handling system:
determining a weighted security value for the user setting, wherein the weighted security value indicates an importance to security of the information handling system for the user setting;
determining a boot phase associated with the user setting, the boot phase selected from: pre-boot, boot, and runtime;
based at least in part on the weighted security value, calculating a security level for the BIOS; and
updating a display element included in a BIOS user interface, the display element indicative of the security level for the BIOS for the boot phase.
2. The method of claim 1 , wherein determining the weighted security value for the user setting includes:
accessing a lookup table of weighted security values for user settings of the BIOS.
3. The method of claim 2 , wherein the lookup table is stored in a non-volatile memory accessible to the BIOS.
4. The method of claim 1 , wherein determining the weighted security value for the user setting includes:
determining the weighted security value for a plurality of user settings associated with the boot phase, including the user setting.
5. The method of claim 4 , wherein calculating the security level for the BIOS includes:
calculating the security level for the boot phase.
6. The method of claim 5 , wherein the BIOS user interface includes respective display elements for different boot phases, and wherein updating the display element includes:
updating the display element indicative of the security level for the boot phase.
7. An information handling system, comprising:
a microprocessor subsystem having access to a non-volatile memory comprising a basic input/output system (BIOS), wherein the BIOS includes BIOS instructions executable by the processor subsystem to:
detect a change in a user setting of the BIOS from an old value to a new value;
determine whether the user setting is associated with security of the information handling system;
when the user setting is associated with security of the information handling system:
determine a weighted security value for the new value of the user setting, wherein the weighted security value indicates an importance to security of the information handling system for the new value;
determine a boot phase associated with the user setting, the boot phase selected from: pre-boot, boot, and runtime;
based at least in part on the weighted security value, calculate a security level for the BIOS; and
update a display element included in a BIOS user interface, the display element indicative of the security level for the BIOS for the boot phase.
8. The information handling system of claim 7 , wherein the instructions to determine the weighted security value for the user setting include instructions to:
access a lookup table of weighted security values for user settings of the BIOS.
9. The information handling system of claim 8 , wherein the lookup table is stored in a non-volatile memory accessible to the BIOS.
10. The information handling system of claim 7 , wherein the instructions to determine the weighted security value for the user setting include instructions to:
determine the weighted security value for a plurality of user settings associated with the boot phase, including the user setting.
11. The information handling system of claim 10 , wherein the instructions to calculate the security level for the BIOS include instructions to:
calculate the security level for the boot phase.
12. The information handling system of claim 11 , wherein the BIOS user interface includes respective display elements for different boot phases, and wherein the instructions to update the display element include instructions to:
update the display element indicative of the security level for the boot phase.
13. An article of manufacture comprising:
a non-transitory computer-readable medium storing instructions, the instructions representing a basic input/output system (BIOS) for an information handling system, that, when executed by a processor of the information handling system, cause the processor to:
detect a change in a user setting of the BIOS from an old value to a new value;
determine whether the user setting is associated with security of the information handling system;
when the user setting is associated with security of the information handling system:
determine a weighted security value for the new value of the user setting, wherein the weighted security value indicates an importance to security of the information handling system of the new value;
determine a boot phase associated with the user setting, the boot phase selected from: pre-boot, boot, and runtime;
based at least in part on the weighted security value, calculate a security level for the BIOS; and
update a display element included in a BIOS user interface, the display element indicative of the security level for the BIOS for the boot phase.
14. The article of manufacture of claim 13 , wherein the instructions to determine the weighted security value for the user setting include instructions to:
access a lookup table of weighted security values for user settings of the BIOS.
15. The article of manufacture of claim 14 , wherein the lookup table is stored in a non-volatile memory accessible to the BIOS.
16. The article of manufacture of claim 13 , wherein the instructions to determine the weighted security value for the user setting include instructions to:
determine the weighted security value for a plurality of user settings associated with the boot phase, including the user setting.
17. The article of manufacture of claim 16 , wherein the instructions to calculate the security level for the BIOS include instructions to:
calculate the security level for the boot phase.
18. The article of manufacture of claim 17 , wherein the BIOS user interface includes respective display elements for different boot phases, and wherein the instructions to update the display element include instructions to:
update the display element indicative of the security level for the boot phase.