System and method to inhibit firmware downgrade
A system initiates a boot operation that executes firmware, and retrieves an anti-roll back version table stored by a trusted platform module. The system determines that the firmware is invalid based on the anti-roll back version table retrieved from the trusted platform module, and aborts the boot operation in response to the determining that the firmware is invalid based on the anti-roll back version table.
1. A method, comprising:
initiating, by a hardware processor, a boot operation that executes a first version of a firmware;
retrieving an anti-roll back version table stored by a trusted platform module, wherein the anti-roll back version table specifies which particular version of the firmware is allowed to execute;
subsequent to successfully verifying a cryptographic signature associated with the first version of the firmware, determining whether the first version of the firmware is valid or invalid;
determining that the first version of the firmware is invalid based on the anti-roll back version table retrieved from the trusted platform module when the first version of the firmware does not match the particular version specified in the anti-roll back version table that is allowed to execute;
aborting, by the hardware processor, the boot operation in response to the determining that the first version of the firmware is invalid based on the anti-roll back version table;
determining that the first version of the firmware is valid based on the anti-roll back version table when the first version of the firmware matches the particular version specified in the anti-roll back version table;
performing subsequent verification of other firmware versions in response to the determining that the first version of the firmware is valid based on the anti-roll back version table; and
performing secure boot operation when the subsequent verification of the other firmware versions is valid.
2. The method of claim 1 , further comprising storing the anti-roll back version table in a non-volatile memory of the trusted platform module.
3. The method of claim 1 , wherein the retrieving of the anti-roll back version table further comprises retrieving the anti-roll back version table from a non-volatile memory of the trusted platform module.
4. The method of claim 1 , further comprising generating a specific cryptographic signature representing the anti-roll back version table.
5. The method of claim 1 , further comprising reading the firmware from a memory device.
6. A system, comprising:
a hardware processor; and
a memory device accessible to the hardware processor, the memory device storing instructions that when executed cause the hardware processor to perform operations including:
initiating a boot operation that executes a first version of a firmware;
retrieving an anti-roll back version table stored by a trusted platform module, wherein the anti-roll back version table specifies which particular version of the firmware is allowed to execute;
determining that the first version of the firmware is invalid based on the anti-roll back version table retrieved from the trusted platform module when the first version of the firmware does not match the particular version specified in the anti-roll back version table that is allowed to execute;
aborting the boot operation in response to the determining that the first version of the firmware is invalid based on the anti-roll back version table;
determining that the first version of the firmware is valid based on the anti-roll back version table when the first version of the firmware matches the particular version specified in the anti-roll back version table;
performing subsequent verification of other firmware versions in response to the determining that the first version of the firmware is valid based on the anti-roll back version table; and
performing secure boot operation when the subsequent verification of the other firmware versions is valid.
7. The system of claim 6 , wherein the operations further comprise storing the anti-roll back version table in a non-volatile memory of the trusted platform module.
8. The system of claim 6 , wherein the operations further comprise retrieving the anti-roll back version table from a non-volatile memory of the trusted platform module.
9. The system of claim 6 , wherein the operations further comprise generating a cryptographic signature representing the anti-roll back version table.
10. The system of claim 6 , wherein the operations further comprise reading the firmware from the memory device.
11. A non-transitory memory device storing instructions that when executed cause a network interface card to perform operations comprising:
initiating a boot operation that executes a first version of a firmware;
retrieving an anti-roll back version table stored by a trusted platform module, wherein the anti-roll back version table specifies which particular version of the firmware is allowed to execute;
subsequent to successfully verifying a cryptographic signature associated with the first version of the firmware, determining whether the first version of the firmware is valid or invalid;
determining that the first version of the firmware is invalid based on the anti-roll back version table retrieved from the trusted platform module when the first version of the firmware does not match the particular version specified in the anti-roll back version table that is allowed to execute;
aborting the boot operation in response to the determining that the first version of the firmware is invalid based on the anti-roll back version table;
determining that the first version of the firmware is valid based on the anti-roll back version table when the first version of the firmware matches the particular version specified in the anti-roll back version table;
performing subsequent verification of other firmware versions in response to the determining that the first version of the firmware is valid based on the anti-roll back version table; and
performing secure boot operation when the subsequent verification of the other firmware versions is valid.
12. The non-transitory memory device of claim 11 , wherein the operations further comprise storing the anti-roll back version table in a non-volatile memory of the trusted platform module.
13. The non-transitory memory device of claim 11 , wherein the operations further comprise retrieving the anti-roll back version table from a non-volatile memory of the trusted platform module.
14. The non-transitory memory device of claim 11 , wherein the operations further comprise generating a specific cryptographic signature representing the anti-roll back version table.