Secure initialization using embedded controller (EC) root of trust
Embodiments support establishing an embedded controller comprised within an Information Handling System (IHS) as a hardware root of trust. With the booting of the IHS paused and based on instructions encoded in a ROM (Read-Only Memory) of the embedded controller, the firmware of the embedded controller is read from a flash memory, such as a SPI Flash, and stored to a RAM (Random Access Memory) of the embedded controller. The firmware is then authenticated based on instructions encoded in the ROM. Based on instructions included in the authenticated firmware, the embedded controller reads SBIOS (Startup Basic Input Output System) instructions from the flash memory and stores them to RAM where they are authenticated based on instructions included in the authenticated embedded controller firmware. If the SBIOS instructions are authenticated, the embedded controller authorizes booting of the IHS to resume using the authenticated SBIOS instructions.
1. An Information Handling System (IHS), comprising:
a flash memory; and
an embedded controller coupled to the flash memory, wherein the embedded controller comprises a Read-Only Memory (ROM) and a Random-Access Memory (RAM), and wherein the embedded controller is configured to:
read embedded controller firmware from the flash memory to the RAM based on instructions encoded in the ROM, wherein the embedded controller firmware is read from the flash memory via a first bus between the flash memory and the embedded controller;
authenticate the embedded controller firmware based on instructions encoded in the ROM;
read SBIOS (Startup Basic Input Output System) instructions via the first bus from the flash memory to the RAM based on instructions included in the authenticated embedded controller firmware;
prior to executing the SBIOS instructions in the RAM, disable the first bus between the flash memory and embedded controller;
while the first bus remains disabled, authenticate the SBIOS instructions based on instructions included in the authenticated embedded controller firmware in the RAM; and
authorize booting of the IHS from the authenticated SBIOS instructions, wherein the first bus between the embedded controller and the flash memory remains disabled during booting of the IHS from the authenticated SBIOS instructions.
2. The IHS of claim 1 , wherein the flash memory comprises a Serial Peripheral Interface (SPI) flash memory device coupled to a chipset of the IHS.
3. The IHS of claim 1 , wherein the instructions encoded in the ROM specify a location of embedded controller firmware in the flash memory.
4. The IHS of claim 1 , wherein the instructions encoded in the ROM comprise a signature corresponding to authentic firmware of the embedded controller, and wherein the instructions encoded in the ROM comprise instructions for calculating a signature for the embedded controller firmware read from the flash memory, and wherein the embedded controller firmware read from the flash memory is authenticated based on comparison of the calculated signature and the signature encoded in the ROM.
5. The IHS of claim 1 , wherein the first bus between the embedded controller and the flash memory remains disabled while the embedded controller instructions that are not encoded in the ROM.
6. The IHS of claim 1 , wherein the embedded controller firmware comprises instructions for reading the SBIOS instructions from the flash memory in a plurality of blocks corresponding to a size of the RAM.
7. The IHS of claim 6 , wherein the embedded controller firmware comprises instructions for iteratively calculating a signature for the SBIOS instructions in flash memory based on signature calculated for each of the plurality of block of SBIOS instructions read to the RAM.
8. An embedded controller comprised within an Information Handling System (IHS), wherein the embedded controller is coupled to the flash memory, and wherein the embedded controller comprises a Read-Only Memory (ROM) and a Random-Access Memory (RAM), and wherein the embedded controller is configured to:
read embedded controller firmware from the flash memory to the RAM based on instructions encoded in the ROM, wherein the embedded controller firmware is read from the flash memory via a first bus between the flash memory and the embedded controller;
authenticate the embedded controller firmware based on instructions encoded in the ROM;
read SBIOS (Startup Basic Input Output System) instructions via the first bus from the flash memory to the RAM based on instructions included in the authenticated embedded controller firmware;
prior to executing the SBIOS instructions in the RAM, disable the first bus between the flash memory and embedded controller;
while the first bus remains disabled, authenticate the SBIOS instructions based on instructions included in the authenticated embedded controller firmware; and
authorize booting of the IHS from the authenticated SBIOS instructions, wherein the first bus between the embedded controller and the flash memory remains disabled during booting of the IHS from the authenticated SBIOS instructions.
9. The embedded controller of claim 8 , wherein the flash memory comprises a Serial Peripheral Interface (SPI) flash memory device coupled to a chipset of the IHS.
10. The embedded controller of claim 8 , wherein the instructions encoded in the ROM specify a location of embedded controller firmware in the flash memory.
11. The embedded controller of claim 8 , wherein the instructions encoded in the ROM comprise a signature corresponding to authentic firmware of the embedded controller, and wherein the instructions encoded in the ROM comprise instructions for calculating a signature for the embedded controller firmware read from the flash memory, wherein the embedded controller firmware read from the flash memory is authenticated based on comparison of the calculated signature and the signature encoded in the ROM.
12. The embedded controller of claim 8 , wherein the first bus between the embedded controller and the flash memory remains disabled while the embedded controller executes instructions that are not encoded in the ROM.
13. The embedded controller of claim 8 , wherein the embedded controller firmware comprises instructions for reading the SBIOS instructions from the flash memory in a plurality of blocks corresponding to a size of the RAM.
14. The embedded controller of claim 13 , wherein the embedded controller firmware comprises instructions for iteratively calculating a signature for the SBIOS instructions in flash memory based on signature calculated for each of the plurality of block of SBIOS instructions read to the RAM.
15. A method for establishing an embedded controller comprised within an Information Handling System (IHS) as a hardware root of trust, wherein the embedded controller is coupled to the flash memory, and wherein the embedded controller comprises a Read-Only Memory (ROM) and a Random-Access Memory (RAM), the method comprising:
reading embedded controller firmware from the flash memory to the RAM based on instructions encoded in the ROM, wherein the embedded controller firmware is read from the flash memory via a first bus between the flash memory and the embedded controller;
authenticating the embedded controller firmware based on instructions encoded in the ROM;
reading SBIOS (Startup Basic Input Output System) instructions via the first bus from the flash memory to the RAM based on instructions included in the authenticated embedded controller firmware;
prior to executing the SBIOS instructions in the RAM, disabling the first bus between the flash memory and embedded controller;
while the first bus remains disabled, authenticating the SBIOS instructions based on instructions included in the authenticated embedded controller firmware; and
authorizing booting of the IHS from the authenticated SBIOS instructions, wherein the first bus between the embedded controller and the flash memory remains disabled during booting of the IHS from the authenticated SBIOS instructions.
16. The method of claim 15 , wherein the instructions encoded in the ROM specify a location of embedded controller firmware in the flash memory, and wherein the instructions encoded in the ROM comprise a signature corresponding to authentic firmware of the embedded controller, and wherein the instructions encoded in the ROM comprise instructions for calculating a signature for the embedded controller firmware read from the flash memory.
17. The method of claim 15 , wherein the first bus between the embedded controller and the flash memory remains disabled while the embedded controller executions executes instructions that are not encoded in the ROM.
18. The method of claim 15 , wherein the embedded controller firmware comprises instructions for reading the SBIOS instructions from the flash memory in a plurality of blocks corresponding to a size of the RAM and wherein the embedded controller firmware comprises instructions for iteratively calculating a signature for the SBIOS instructions in flash memory based on signature calculated for each of the plurality of block of SBIOS instructions read to the RAM.