Management controller to bios root of trust bypass implant detection and remediation
An information handling system may include a host system comprising a host system processor, a management controller communicatively coupled to the host system processor and a logic device and configured to perform out-of-band management of the information handling system, and a logic device communicatively coupled to the host system and the management controller. The logic device may be configured to, upon determining that a watchdog timer has timed out a threshold number of times without completion of a boot of the management controller, allow boot of the host system, after boot of the host system, determine if a later boot of the management controller occurs, and if the later boot of the management controller occurs, force the host system to power off.
1. An information handling system comprising:
a host system comprising a host system processor;
a management controller communicatively coupled to the host system processor and a logic device and configured to perform out-of-band management of the information handling system; and
a logic device communicatively coupled to the host system and the management controller and configured to:
upon determining that a watchdog timer has timed out a threshold number of times without completion of a boot of the management controller, allow boot of the host system;
after boot of the host system, determine if a later boot of the management controller occurs; and
if the later boot of the management controller occurs, force the host system to power off.
2. The information handling system of claim 1 , wherein the logic device is further configured to, after forcing the host system to power off, invoke an alternating current cycle of the information handling system.
3. The information handling system of claim 1 , wherein the logic device is further configured to, after forcing the host system to power off, reset the management controller.
4. A method, in an information handling system comprising a host system comprising a host system processor and a management controller communicatively coupled to the host system processor and a logic device and configured to perform out-of-band management of the information handling system, the method comprising:
upon determining that a watchdog timer has timed out a threshold number of times without completion of a boot of the management controller, allowing boot of the host system;
after boot of the host system, determining if a later boot of the management controller occurs; and
if the later boot of the management controller occurs, forcing the host system to power off.
5. The method of claim 4 , further comprising, after forcing the host system to power off, invoking an alternating current cycle of the information handling system.
6. The method of claim 4 , further comprising, after forcing the host system to power off, resetting the management controller.
7. An article of manufacture comprising:
a non-transitory computer-readable medium; and
computer-executable instructions carried on the computer-readable medium, the instructions readable by a processing device, the instructions, when read and executed, for causing the processing device to, in an information handling system comprising a host system comprising a host system processor and a management controller communicatively coupled to the host system processor and a logic device and configured to perform out-of-band management of the information handling system:
upon determining that a watchdog timer has timed out a threshold number of times without completion of a boot of the management controller, allow boot of the host system;
after boot of the host system, determine if a later boot of the management controller occurs; and
if the later boot of the management controller occurs, force the host system to power off.
8. The article of claim 7 , wherein the logic device is further configured to, after forcing the host system to power off, invoke an alternating current cycle of the information handling system.
9. The article of claim 7 , wherein the logic device is further configured to, after forcing the host system to power off, reset the management controller.