Use of security key to enable firmware features
A system may be configured to receive via a user interface a user-initiated prompt to begin start-up of a computer system firmware via access to a firmware start-up utility. The system may also generate a request for user authentication, and detect a private key for user authentication. The system may also determine whether the private key corresponds to a public key previously registered with the computer system firmware, and initiate, when the private key corresponds to the public key, completion of the start-up of the computer system firmware and allowance of operation of the computer system firmware via access to the firmware start-up utility. When the private key does not correspond to the public key, the system may prevent at least one aspect of an operation associated with the start-up of the computer system firmware.
1. A non-transitory computer-readable storage medium, having computer-executable instructions stored thereupon which, when executed by the computer, cause the computer to:
generate, via a computer system firmware and responsive to a computer system start-up, a request for a user authentication;
detect via the computer system firmware, a security key device storing a private key for the user authentication;
determine via the computer system firmware whether the private key corresponds to a public key previously registered with the computer system firmware;
initiate, when the private key corresponds to the public key, completion of the start-up of the computer system firmware and allowing operation of the computer system firmware; and
prevent, when the private key does not correspond to the public key, a change to a computer system parameter, the change comprising selection of start-up options associated with the computer system firmware.
2. The non-transitory computer-readable storage medium of claim 1 , wherein detecting via the computer system firmware the security key device comprises determining whether the security key device has been activated.
3. The non-transitory computer-readable storage medium of claim 1 , wherein receiving a user-initiated prompt comprises receiving user credentials previously registered with the computer system firmware, wherein the user credentials comprise at least one of a user identification or a user password.
4. The non-transitory computer-readable storage medium of claim 3 , wherein determining via the computer system firmware-whether the private key corresponds to the public key comprises determining whether the private key corresponds to the user credentials.
5. The non-transitory computer-readable storage medium of claim 1 , wherein when the private key does not correspond to the public key, the instructions further causing the computer to perform at least one of sounding an audible alarm or activating a visual alarm.
6. The non-transitory computer-readable storage medium of claim 1 , wherein detecting the security key device comprises detecting the security key device in a universal serial bus (USB) port.
7. The non-transitory computer-readable storage medium of claim 1 , wherein at least one of the start-up options associated with the computer system firmware comprises preventing completion of the start-up of the computer system firmware.
8. The non-transitory computer-readable storage medium of claim 1 , wherein at least one of the start-up options associated with the computer system firmware comprises preventing serial AT attachment (SATA) hard drive encryption.
9. The non-transitory computer-readable storage medium of claim 1 , wherein at least one of the start-up options associated with the computer system firmware comprises preventing setup of an advanced configuration and power interface (ACPI) value.
10. The non-transitory computer-readable storage medium of claim 1 , wherein at least one of the start-up options associated with the computer system firmware comprises disabling an intelligent platform management interface (IPMI).
11. The non-transitory computer-readable storage medium of claim 1 , wherein at least one of the start-up options associated with the computer system firmware comprises reducing speed of operation of the computer system firmware.
12. The non-transitory computer-readable storage medium of claim 1 , wherein at least one of the start-up options associated with the computer system firmware comprises disabling performance options associated with the computer system firmware.
13. The non-transitory computer-readable storage medium of claim 1 , wherein at least one of the start-up options associated with the computer system firmware comprises disabling at least one of a peripheral component interconnect (PCI) device or a universal serial bus (USB) device.
14. The non-transitory computer-readable storage medium of claim 1 , wherein at least one of the start-up options associated with the computer system firmware comprises disabling a southbridge.
15. The non-transitory computer-readable storage medium of claim 1 , wherein at least one of the start-up options associated with the computer system firmware comprises disabling flash-ability of a basic input/output system (BIOS) of the computer system firmware.
16. The non-transitory computer-readable storage medium of claim 1 , wherein at least one of the start-up options associated with the computer system firmware comprises disabling option read only memory (OPROM).
17. The non-transitory computer-readable storage medium of claim 1 , wherein at least one of the start-up options associated with the computer system firmware comprises limiting user access to a system management basic input/output system (SMBIOS) data.
18. A computer-implemented method for authenticating a user for an operation of a computer system firmware comprising:
generating via a computer system firmware and responsive to a computer system start-up, a request for a user authentication;
detecting via the computer system firmware, a security key device storing a private key for the user authentication;
determining via the computer system firmware whether the private key corresponds to a public key previously registered with the computer system firmware;
initiating, when the private key corresponds to the public key, completion of the start-up of the computer system firmware and allowance of operation of the computer system firmware; and
preventing, when the private key does not correspond to the public key, a change to a computer system parameter, the change comprising selection of start-up options associated with the computer system firmware.
19. The method as recited in claim 18 , wherein detecting via the computer system firmware the security key device comprises determining whether the security key device has been activated.
20. The method as recited in claim 18 , wherein receiving a user-initiated prompt comprises receiving user credentials previously registered with the computer system firmware, wherein the user credentials comprise at least one of a user identification or a user password.
21. The method as recited in claim 20 , wherein determining whether the private key corresponds to a public key comprises determining whether the private key corresponds to the user credentials.
22. The method as recited in claim 18 , wherein when the private key does not correspond to the public key, the method further comprising sounding an audible alarm.
23. The method as recited in claim 18 , wherein detecting the security key device comprises detecting the security key device in a universal serial bus (USB) port.
24. A system comprising:
one or more processors; and
memory storing computer-executable instructions that, when executed, cause the one or more processors to perform acts comprising:
receiving, via a user interface, a user-initiated prompt to begin start-up of the computer system firmware;
receiving user credentials previously registered with the computer system firmware, wherein the user credentials comprise at least one of a user identification or a user password;
generating via the computer system firmware a request for a user authentication;
detecting via the computer system firmware a security key device storing a private key to provide the user authentication;
determining via the computer system firmware whether the private key and the user credentials correspond to a public key previously registered with the computer system firmware;
initiating, when the private key and the user credentials correspond to the public key, completion of the start-up of the computer system firmware and allowing operation of the computer system firmware; and
preventing, when at least one of the private key or the user credentials do not correspond to the public key, a change to a computer system parameter, the change comprising selection of start-up options associated with the computer system firmware.
25. The system as recited in claim 24 , wherein detecting via the computer system firmware the private key comprises detecting a physical presence of a security key device configured to provide the private key.
26. The system s recited in claim 25 , wherein detecting the private key comprises transmitting the private key using an electric charge received from the human touch.
27. The system as recited in claim 25 , wherein detecting the private key comprises detecting the security key device in a universal serial bus (USB).
28. The system as recited in claim 25 , wherein detecting the security key device comprises determining whether the security key device has been activated by the user.