Systems and methods for secure boot and runtime tamper detection
View Patent ↗A method may include determining if both of two redundant operating system images for executing functionality of a chassis management controller were found during one or more previous boot sessions of the chassis management controller to be unsecure, wherein each operating system image comprises an integrated kernel and initial file root system stored in a respective first partition of a memory of the chassis management controller, verity hashes of a root file system of such operating system image, the verity hashes stored in a respective second partition of the memory, and the root file system of such operating system image stored in a respective third partition of the memory. The method may also include, in response to determining that one of the two redundant operating system images is secure, initiate verification of such operating system image to determine if such operating system image has indicia of tampering.
1. An information handling system comprising:
a processor;
a memory communicatively coupled to the processor and having stored thereon two redundant operating system images, each operating system image comprising:
an integrated kernel and initial root file system stored in a respective first partition of the memory;
verity hashes of a root file system of such operating system image, the verity hashes stored in a respective second partition of the memory; and
the root file system of such operating system image stored in a respective third partition of the memory; and
a basic input/output system configured to, when executed by the processor:
determine if both of the redundant operating system images were found during one or more previous boot sessions of the information handling system to be unsecure; and
in response to determining that one of the two redundant operating system images is secure, initiating verification of such operating system image to determine if such operating system image has indicia of tampering, wherein the verification includes:
verifying a signature of the integrated kernel and initial root file system of such operating system image;
loading the integrated kernel and initial root file system responsive to verifying the signature; and
verifying the root file system of such operating system based on the verity hashes of such operating system.
2. The information handling system of claim 1 , wherein loading the integrated kernel and initial root file system responsive to verifying the signature and verifying the root file system of such operating system based on the verity hashes of such operating system is performed by the integrated kernel and initial root file system executing on the processor.
3. The information handling system of claim 1 , wherein the verification of such operating system image further comprises completing execution of such operating system image in response to verification of the root file system.
4. The information handling system of claim 1 , wherein verification of such operating system image further comprises verifying the root file system of such operating system based on the verity hashes of such operating system during runtime of such operating system.
5. The information handling system of claim 1 , wherein the verification of such operating system image further comprises, in response to a failure in verification of such operating system image:
writing a variable to the basic input/output system such that the basic input/output system determines such operating system image to be unsecure during a subsequent boot of the information handling system; and
rebooting the information handling system.
6. The information handling system of claim 1 , wherein the verification of such operating system image further comprises, in response to determining that the two redundant operating system images are unsecure, communicating a message to a user indicating that the two redundant operating system images are unsecure.
7. The information handling system of claim 1 , wherein the integrated kernel and initial root file system, the verity hashes, and the root file system of each operating system image is signed with a digital signature verifiable by a certificate stored in the basic input/output system.
8. A chassis comprising:
a plurality of slots each configured to receive a corresponding modular information handling system; and
a chassis management controller communicatively coupled to the plurality of slots and comprising a memory communicatively having stored thereon two redundant operating system images for executing functionality of the chassis management controller, each operating system image comprising:
an integrated kernel and initial root file system stored in a respective first partition of a memory of the chassis management controller;
verity hashes of a root file system of such operating system image, the verity hashes stored in a respective second partition of the memory; and
the root file system of such operating system image stored in a respective third partition of the memory; and
wherein the chassis management controller is configured to:
determine if both of the redundant operating system images were found during one or more previous boot sessions of the chassis management controller to be unsecure; and
in response to determining that one of the two redundant operating system images is secure, initiating verification of such operating system image to determine if such operating system image has indicia of tampering; wherein the verification includes:
verifying a signature of the integrated kernel and initial root file system of such operating system image;
loading the integrated kernel and initial root file system responsive to verifying the signature; and
verifying the root file system of such operating system based on the verity hashes of such operating system.
9. The chassis of claim 8 , wherein loading the integrated kernel and initial root file system responsive to verifying the signature and verifying the root file system of such operating system based on the verity hashes of such operating system is performed by the integrated kernel and initial root file system.
10. The chassis of claim 8 , wherein the verification of such operating system image further comprises completing execution of such operating system image in response to verification of the root file system.
11. The chassis of claim 8 , wherein verification of such operating system image further comprises verifying the root file system of such operating system based on the verity hashes of such operating system during runtime of such operating system.
12. The chassis of claim 8 , wherein the verification of such operating system image further comprises, in response to a failure in verification of such operating system image:
writing a variable to the chassis management controller such that the chassis management controller is configured to determine such operating system image to be unsecure during a subsequent boot of the chassis management controller; and
rebooting the chassis management controller.
13. The chassis of claim 8 , wherein the verification of such operating system image further comprises, in response to determining that the two redundant operating system images are unsecure, communicating a message to a user indicating that the two redundant operating system images are unsecure.
14. The chassis of claim 8 , wherein the integrated kernel and initial root file system, the verity hashes, and the root file system of each operating system image is signed with a digital signature verifiable by a certificate.
15. A method comprising:
determining if both of two redundant operating system images for executing functionality of a chassis management controller were found during one or more previous boot sessions of the chassis management controller to be unsecure, wherein each operating system image comprises:
an integrated kernel and initial root file system stored in a respective first partition of a memory of the chassis management controller;
verity hashes of a root file system of such operating system image, the verity hashes stored in a respective second partition of the memory; and
the root file system of such operating system image stored in a respective third partition of the memory; and
in response to determining that one of the two redundant operating system images is secure, initiate verification of such operating system image to determine if such operating system image has indicia of tampering, wherein the verification includes:
verifying a signature of the integrated kernel and initial root file system of such operating system image;
loading the integrated kernel and initial root file system responsive to verifying the signature; and
verifying the root file system of such operating system based on the verity hashes of such operating system.
16. The method of claim 15 , wherein loading the integrated kernel and initial root file system responsive to verifying the signature and verifying the root file system of such operating system based on the verity hashes of such operating system is performed by the integrated kernel and initial root file system executing on a processor.
17. The method of claim 15 , wherein the verification of such operating system image further comprises completing execution of such operating system image in response to verification of the root file system.
18. The method of claim 15 , wherein verification of such operating system image further comprises verifying the root file system of such operating system based on the verity hashes of such operating system during runtime of such operating system.
19. The method of claim 15 , wherein the verification of such operating system image further comprises, in response to a failure in verification of such operating system image:
writing a variable to the chassis management controller such that the chassis management controller determines such operating system image to be unsecure during a subsequent boot of the chassis management controller; and
rebooting the chassis management controller.
20. The method of claim 15 , wherein the verification of such operating system image further comprises in response to determining that the two redundant operating system images are unsecure, communicating a message to a user indicating that the two redundant operating system images are unsecure.
21. The method of claim 15 , wherein the integrated kernel and initial root file system, the verity hashes, and the root file system of each operating system image is signed with a digital signature verifiable by a certificate.