System and method of operating an information handling system
In one or more embodiments, one or more systems, one or more methods, and/or one or more processes may determine that a platform reset signal from a processor of an information handling system has been asserted; may determine that a power conservation state from the processor was not asserted within an amount of time; may determine that an operating system restart occurred; may notify a hardware root of trust device to authenticate information handling system firmware; may assert a resume reset signal to the processor; may authenticate the information handling system firmware; may de-assert a power OK signal to the processor; may remove power from the processor; may determine that the resume reset signal to the processor is de-asserted and that the processor is out of the power conservation state; and may provide power to the processor.
1. An information handling system, comprising:
a processor; and
a non-volatile memory medium, coupled to the processor, that stores information handling system firmware (IHSFW) executable by the processor;
a power sequencer device; and
a hardware root of trust (HWRoT) device coupled to the power sequencer device;
wherein the power sequencer device is configured to:
determine that a platform reset signal from the processor has been asserted;
determine that a power conservation state from the processor was not asserted within a first amount of time;
determine that an operating system restart occurred;
notify, via a first notification, the HWRoT device to authenticate the IHSFW with a first notification;
assert a resume reset signal to the processor;
wherein the HWRoT device is configured to:
in response to the first notification, authenticate the IHSFW;
wherein the power sequencer device is further configured to:
de-assert a power OK signal to the processor;
remove power from the processor;
determine that the resume reset signal to the processor is de-asserted and that the processor is out of the power conservation state; and
provide power to the processor.
2. The information handling system of claim 1 , wherein the HWRoT device is further configured to:
after a runtime reset of the information handling system, determine that a second notification to re-authenticate the IHSFW has not been received within a second amount of time transpiring; and
in response to determining that the second notification to re-authenticate the IHSFW has not been received within the second amount of time transpiring, determine that the power sequencer device has been compromised.
3. The information handling system of claim 1 , wherein the HWRoT device is further configured to receive the first notification.
4. The information handling system of claim 1 ,
wherein the power sequencer device is further configured to determine that the power conservation state was de-asserted within a second amount of time; and
wherein the HWRoT device is further configured to determine that the power sequencer device has been compromised.
5. The information handling system of claim 1 , wherein, to determine that the resume reset signal to the processor is de-asserted, the power sequencer device is further configured to determine, via an output of a logical AND gate, that the resume reset signal to the processor is de-asserted.
6. The information handling system of claim 5 ,
wherein the power sequencer device is further configured to provide a first resume reset signal to the logical AND gate;
wherein the HWRoT device is further configured to provide a second resume reset signal to the logical AND gate; and
wherein at least one of the first signal and the second signal is a logical false signal.
7. The information handling system of claim 1 , wherein, to authenticate the IHSFW, the HWRoT device is further configured to obtain a signature of the IHSFW from the non-volatile memory medium.
8. The information handling system of claim 7 , wherein, to authenticate the IHSFW, the HWRoT device is further configured to:
determine a first hash value of the IHSFW;
decrypt the signature of the IHSFW with a public encryption key to obtain a second hash value; and
determine that the first hash value matches the second hash value.
9. The information handling system of claim 1 ,
wherein the power sequencer device includes a first microcontroller; and
wherein the HWRoT device includes a second microcontroller, different from the first microcontroller.
10. A method, comprising:
determining, by a power sequencer device, that a platform reset signal from a processor of an information handling system has been asserted;
determining, by the power sequencer device, that a power conservation state from the processor was not asserted within a first amount of time;
determining, by the power sequencer device, that an operating system restart occurred;
notifying via a first notification, by the power sequencer device, a hardware root of trust (HWRoT) device to authenticate information handling system firmware (IHSFW);
asserting, by the power sequencer device, a resume reset signal to the processor;
in response to the first notification, authenticating, by the HWRoT device, the IHSFW;
de-asserting, by the power sequencer device, a power OK signal to the processor;
removing, by the power sequencer device, power from the processor;
determining, by the power sequencer device, that the resume reset signal to the processor is de-asserted and that the processor is out of the power conservation state; and
providing, by the power sequencer device, power to the processor.
11. The method of claim 10 , further comprising:
after a runtime reset of the information handling system, determining, by the HWRoT device, that a second notification to re-authenticate the IHSFW has not been received within a second amount of time transpiring; and
in response to the determining that the second notification to re-authenticate the IHSFW has not been received within the second amount of time transpiring, determining, by the HWRoT device, that the power sequencer device has been compromised.
12. The method of claim 10 , further comprising:
determining, by the power sequencer device, that the power conservation state was de-asserted within a second amount of time; and
determining, by the HWRoT device, that the power sequencer device has been compromised.
13. The method of claim 10 , wherein the determining that the resume reset signal to the processor is de-asserted includes determining, via an output of a logical AND gate, that the resume reset signal to the processor is de-asserted.
14. The method of claim 13 , further comprising:
providing, by the power sequencer device, a first resume reset signal to the logical AND gate; and
providing, by the HWRoT device, a second resume reset signal to the logical AND gate;
wherein at least one of the first signal and the second signal is a logical false signal.
15. The method of claim 10 , wherein the authenticating, by the HWRoT device, the IHSFW includes obtaining a signature of the IHSFW from a non-volatile memory medium that stores the IHSFW.
16. The method of claim 15 , wherein the authenticating, by the HWRoT device, the IHSFW further includes:
determining, by the HWRoT device, a first hash value of the IHSFW;
decrypting, by the HWRoT device, the signature of the IHSFW with a public encryption key to obtain a second hash value; and
determining, by the HWRoT device, that the first hash value matches the second hash value.
17. The method of claim 10 ,
wherein the power sequencer device includes a first microcontroller; and
wherein the HWRoT device includes a second microcontroller, different from the first microcontroller.
18. A microcontroller, comprising:
a processor; and
a non-volatile memory medium, coupled to the processor, that stores instructions that, when executed by the processor, cause the microcontroller to:
determine that a platform reset signal from a processor of an information handling system has been asserted;
determine that a power conservation state from the processor of the information handling system was not asserted within a first amount of time;
determine that an operating system restart occurred;
notify, via a notification, a hardware root of trust (HWRoT) device to authenticate information handling system firmware of the information handling system;
assert a resume reset signal to the processor of the information handling system;
de-assert a power OK signal to the processor of the information handling system;
remove power from the processor of the information handling system;
determine that the resume reset signal to the processor of the information handling system is de-asserted and that the processor of the information handling system is out of the power conservation state; and
provide power to the processor of the information handling system via at least one voltage regulator.
19. The microcontroller of claim 18 , wherein, to determine that the resume reset signal to the processor is de-asserted, the instructions further cause the microcontroller to determine, via an output of a logical AND gate, that the resume reset signal to the processor of the information handling system is de-asserted.