Method and apparatus for validating BIOS firmware using a baseboard management controller
A method includes storing basic input/output system (BIOS) firmware instructions at a first flash memory device included at an information handling system. The BIOS firmware includes an initial boot block. BIOS data is stored at a second flash memory device. A baseboard management controller validates instructions included at the initial boot block.
1. A method comprising:
storing basic input/output system (BIOS) firmware instructions at a first flash memory device included at an information handling system, the BIOS firmware including an initial boot block;
storing BIOS data at a second flash memory device; and
validating, by a baseboard management controller (BMC), instructions included at the initial boot block, the validating while the information handling system is under control of an operating system.
2. The method of claim 1 , wherein the second flash memory device is accessible to runtime instructions concurrently with the validating.
3. The method of claim 1 , further comprising:
replacing, by the BMC, the BIOS firmware instructions with updated firmware while the information handling system is under control of an operating system.
4. The method of claim 1 , wherein the validating comprises validating the instructions before executing the instructions at the initial boot block.
5. The method of claim 1 , wherein the first flash memory device includes an image information block (BIB), the image information block identifying a first firmware code block and providing validation information corresponding to the first code block.
6. The method of claim 1 , wherein:
the first flash memory devices is coupled to a first chip select signal provided by a platform controller hub (PCH) and by the BMC; and
the second flash memory device is coupled to a second chip select signal provided by the PCH.
7. The method of claim 1 , wherein the BIOS data includes system configuration settings.
8. The method of claim 5 , wherein the image information block includes a digital signature for validating information included at the image information block.
9. An information handling system comprising:
a central processing unit;
a first flash memory device to store basic input/output system (BIOS) firmware instructions, the firmware including an initial boot block;
a second flash memory device to store BIOS data; and
a baseboard management controller (BMC) configured to validate instructions included at the initial boot block while the information handling system is under control of an operating system.
10. The information handling system of claim 9 , wherein the second flash memory device is accessible to runtime instructions concurrently with the validating.
11. The information handling system of claim 9 , wherein the BMC is further configured to replace the BIOS firmware with updated firmware while the information handling system is under control of an operating system.
12. The information handling system of claim 9 , wherein the BMC is further configured to validate the instructions before executing the instructions at the initial boot block.
13. The information handling system of claim 9 , wherein the first flash memory device includes an image information block, the image information block identifying a first firmware code block and providing validation information corresponding to the first code block.
14. The information handling system of claim 9 , wherein:
the first flash memory devices is coupled to a first chip select signal provided by a platform controller hub (PCH) and by the BMC; and
the second flash memory device is coupled to a second chip select signal provided by the PCH.
15. The information handling system of claim 9 , further comprising a multiplexor function to selectively couple one of the PCH and the BMC to have access to the first flash memory device.
16. A method comprising:
storing immutable basic input/output system (BIOS) firmware instructions at a first flash memory device included at an information handling system;
storing an image information block at the first flash memory device, the image information block identifying a first firmware code block and providing validation information corresponding to the first firmware code block; and
validating the immutable BIOS instructions using a baseboard management controller based on the validation information while the information handling system is under control of an operating system.
17. The method of claim 16 , further comprising:
storing BIOS data at a second flash memory device, the BIOS data accessible to runtime instructions concurrent with the validating.
18. The method of claim 16 , further comprising:
updating firmware at the first flash memory device while the information handling system is under control of an operating system.