SYSTEMS AND METHODS FOR VERIFYING AND PRESERVING THE INTEGRITY OF BASIC INPUT/OUTPUT SYSTEM BEFORE POWERING ON OF HOST SYSTEM AND MANAGEMENT ENGINE
A method may include responsive to a power event associated with an information handling system, intercepting the power event and holding a platform controller hub of the information handling system from completing the power event to prevent execution of code of a basic input/output system of the information handling system, attempting to verify image integrity of the basic input/output system, and allowing the platform controller hub to complete the power event to allow execution of the code of the basic input/output system responsive to successful verification of the image integrity of the basic input/output system.
1 . An information handling system comprising:
a processor;
a platform controller hub communicatively coupled to the processor;
a basic input/output system comprising a program of instructions executable by the processor and configured to cause the processor to initialize one or more information handling resources of the information handling system; and
a management controller communicatively coupled to the processor and the platform controller hub and configured to provide out-of-band management of the information handling system, the management controller further configured to, responsive to a power event associated with the information handling system:
intercept the power event and hold the platform controller hub from completing the power event to prevent execution of code of the basic input/output system;
attempt to verify image integrity of the basic input/output system; and
allow the platform controller hub to complete the power event to allow execution of the code of the basic input/output system responsive to successful verification of the image integrity of the basic input/output system.
2 . The information handling system of claim 1 , wherein the management controller is further configured to restore the basic input/output system from a restore image responsive to unsuccessful verification of the basic input/output system.
3 . The information handling system of claim 2 , wherein the management controller is further configured to attempt to verify image integrity of the basic input/output system as restored from the restore image.
4 . The information handling system of claim 2 , wherein the management controller is further configured to:
attempt to verify image integrity of the basic input/output system as restored from the restore image; and
allow the platform controller hub to complete the power event to allow execution of the code of the basic input/output system as restored from the restore image responsive to successful verification of the image integrity of the basic input/output system as restored from the restore image.
5 . The information handling system of claim 4 , wherein the management controller is further configured to continue to hold the platform controller hub from completing the power event to prevent execution of code of the basic input/output system responsive to unsuccessful verification of the image integrity of the basic input/output system as restored from the restore image.
6 . The information handling system of claim 1 , wherein:
the power event is an alternating current power event; and
prevention of execution of the code of the basic input/output system prevents execution of a management engine within the platform controller hub until successful image verification of the basic input/output system.
7 . The information handling system of claim 1 , wherein:
the power event is a direct current power event; and
prevention of execution of the code of the basic input/output system prevents execution of a host system of the information handling until successful image verification of the basic input/output system.
8 . A method comprising, responsive to a power event associated with an information handling system:
intercepting the power event and holding a platform controller hub of the information handling system from completing the power event to prevent execution of code of a basic input/output system of the information handling system;
attempting to verify image integrity of the basic input/output system; and
allowing the platform controller hub to complete the power event to allow execution of the code of the basic input/output system responsive to successful verification of the image integrity of the basic input/output system.
9 . The method of claim 8 , further comprising restoring the basic input/output system from a restore image responsive to unsuccessful verification of the basic input/output system.
10 . The method of claim 9 , further comprising to attempting to verify image integrity of the basic input/output system as restored from the restore image.
11 . The method of claim 9 , further comprising:
attempting to verify image integrity of the basic input/output system as restored from the restore image; and
allowing the platform controller hub to complete the power event to allow execution of the code of the basic input/output system as restored from the restore image responsive to successful verification of the image integrity of the basic input/output system as restored from the restore image.
12 . The method of claim 11 , further comprising continuing to hold the platform controller hub from completing the power event to prevent execution of code of the basic input/output system responsive to unsuccessful verification of the image integrity of the basic input/output system as restored from the restore image.
13 . The method of claim 8 , wherein:
the power event is an alternating current power event; and
prevention of execution of the code of the basic input/output system prevents execution of a management engine within the platform controller hub until successful image verification of the basic input/output system.
14 . The method of claim 8 , wherein:
the power event is a direct current power event; and
prevention of execution of the code of the basic input/output system prevents execution of a host system of the information handling until successful image verification of the basic input/output system.
15 . An article of manufacture comprising:
a non-transitory computer-readable medium; and
computer-executable instructions carried on the computer-readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to, responsive to a power event associated with an information handling system:
intercept the power event and holding a platform controller hub of the information handling system from completing the power event to prevent execution of code of a basic input/output system of the information handling system;
attempt to verify image integrity of the basic input/output system; and
allow the platform controller hub to complete the power event to allow execution of the code of the basic input/output system responsive to successful verification of the image integrity of the basic input/output system.
16 . The article of claim 15 , the instructions for further causing the processor to restore the basic input/output system from a restore image responsive to unsuccessful verification of the basic input/output system.
17 . The article of claim 16 , the instructions for further causing the processor to attempt to verify image integrity of the basic input/output system as restored from the restore image.
18 . The article of claim 16 , the instructions for further causing the processor to:
attempt to verify image integrity of the basic input/output system as restored from the restore image; and
allow the platform controller hub to complete the power event to allow execution of the code of the basic input/output system as restored from the restore image responsive to successful verification of the image integrity of the basic input/output system as restored from the restore image.
19 . The article of claim 18 , the instructions for further causing the processor to continue to hold the platform controller hub from completing the power event to prevent execution of code of the basic input/output system responsive to unsuccessful verification of the image integrity of the basic input/output system as restored from the restore image.
20 . The article of claim 15 , wherein:
the power event is an alternating current power event; and
prevention of execution of the code of the basic input/output system prevents execution of a management engine within the platform controller hub until successful image verification of the basic input/output system.
21 . The article of claim 15 , wherein:
the power event is a direct current power event; and
prevention of execution of the code of the basic input/output system prevents execution of a host system of the information handling until successful image verification of the basic input/output system.