IP Library Granted Patent US 12,393,486
Granted Patent B2
US 12,393,486 · App. 18/223,299 · Granted Aug 19, 2025

Automatic BMC and bios firmware recovery

Inventors: Anurag Bhatia (Sugar Hill, GA); Winston Thangapandian (Suwanee, GA); Valantina Arumugam (Chennai, IN)
Assignee: AMERICAN MEGATRENDS INTERNATIONAL, LLC
G06F11/1417G06F9/4401
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,393,486
App. No.
18/223,299
Granted
Aug 19, 2025
Kind
B2
Abstract

In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus is a BMC. The BMC detects a boot failure from both an active firmware image and a recovery firmware image. The BMC starts a recovery protocol to acquire a fallback firmware image from a first source once it identifies the failure. The BMC flashes the obtained fallback firmware image onto its storage device. The BMC initiates a boot process using the fallback firmware image.

Claims (46)

1. A method for recovering a firmware image in a baseboard management controller (BMC), the method comprising:

identifying, by the BMC, a failure to boot the BMC from both an active firmware image and a recovery firmware image;

initiating a recovery protocol to secure a fallback firmware image from a first source, when the failure is identified;

flashing the fallback firmware image onto a storage device of the BMC;

booting the BMC using the fallback firmware image stored on the storage device;

identifying, by the BMC, a failure to boot a host computer managed by the BMC from both an active initialization component image and a recovery initialization component image;

initiating a recovery protocol to secure a fallback initialization component image from a source when the failure is identified;

flashing the fallback initialization component image onto a storage device of the host computer;

booting the host computer using the fallback initialization component image stored on the storage device; and

initiating a recovery protocol to secure the fallback initialization component image from a second source, when the recovery from the first source is unsuccessful.

2. The method of claim 1 , further comprising:

validating the fallback firmware image after it is flashed onto the storage device; and

prevent the BMC from booting the fallback firmware image, when the validation is unsuccessful.

3. The method of claim 1 , wherein the first source comprises at least one of an Embedded MultiMedia Card (eMMC), a Secure Digital (SD) card, and network storage.

4. The method of claim 3 , wherein the first source is the network storage and the fallback firmware image is retrieved via a remote file transfer protocol selected from a group consisting of Trivial File Transfer Protocol (TFTP), Secure File Transfer Protocol (SFTP), or Hypertext Transfer Protocol Secure (HTTPS).

5. The method of claim 1 , further comprising:

initiating a recovery protocol to secure the fallback firmware image from a second source, when the recovery from the first source is unsuccessful.

6. The method of claim 1 , wherein the source comprises at least one of an Embedded MultiMedia Card (eMMC), a Secure Digital (SD) card, and network storage connected to the host computer.

7. The method of claim 1 , wherein the active initialization component image and the recovery initialization component image are basic input/output system (BIOS) images or Unified Extensible Firmware Interface (UEFI) images.

8. The method of claim 1 , further comprising:

validating the fallback initialization component image after it is flashed onto the storage device of the host computer; and

prohibiting the host computer from booting the fallback initialization component image, when the validation is unsuccessful.

9. An apparatus, the apparatus being a baseboard management controller (BMC), comprising:

a memory; and

at least one processor coupled to the memory, the processor configured to:

identify a failure to boot the apparatus from both an active firmware image and a recovery firmware image

initiate a recovery protocol to secure a fallback firmware image from a first source, when the failure is identified;

flash the fallback firmware image onto a storage device of the apparatus;

boot the apparatus using the fallback firmware image stored on the storage device;

identify a failure to boot a host computer from both an active initialization component image and a recovery initialization component image;

initiate a recovery protocol to secure a fallback initialization component image from a source, when the failure is identified;

flash the fallback initialization component image onto a storage device of the host computer;

boot the host computer using the fallback initialization component image stored on the storage device; and

initiate a recovery protocol to secure the fallback initialization component image from a second source, when the recovery from the first source is unsuccessful.

10. The apparatus of claim 9 , wherein the processor is further configured to:

validate the fallback firmware image after it is flashed onto the storage device; and

prevent the apparatus from booting the fallback firmware image, when validation is unsuccessful.

11. The apparatus of claim 9 , wherein the first source comprises at least one of an Embedded MultiMedia Card (eMMC), a Secure Digital (SD) card, and network storage.

12. The apparatus of claim 11 , wherein the first source is the network storage, and wherein the fallback firmware image is retrieved via a remote file transfer protocol selected from a group consisting of Trivial File Transfer Protocol (TFTP), Secure File Transfer Protocol (SFTP), or Hypertext Transfer Protocol Secure (HTTPS).

13. The apparatus of claim 9 , wherein the processor is further configured to:

initiate a recovery protocol to secure the fallback firmware image from a second source, when the recovery from the first source is unsuccessful.

14. The apparatus of claim 9 , wherein the source comprises at least one of an Embedded MultiMedia Card (eMMC), a Secure Digital (SD) card, and network storage connected to the host computer.

15. The apparatus of claim 9 , wherein the active initialization component image and the recovery initialization component image are basic input/output system (BIOS) images or Unified Extensible Firmware Interface (UEFI) images.

16. The apparatus of claim 9 , wherein the processor is further configured to:

validate the fallback initialization component image after it is flashed onto the storage device of the host computer; and

prevent the host computer from booting the fallback initialization component image, when the validation is unsuccessful.

Assignments (3)
RELEASE OF SECURITY INTEREST Recorded Oct 17, 2024
From: MIDCAP FINANCIAL TRUST
To: AMERICAN MEGATRENDS INTERNATIONAL, LLC
Reel/Frame 069205/0948 →
SECURITY INTEREST Recorded Apr 30, 2024
From: AMERICAN MEGATRENDS INTERNATIONAL, LLC
To: MIDCAP FINANCIAL TRUST, AS COLLATERAL AGENT
Reel/Frame 067274/0834 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 18, 2023
From: BHATIA, ANURAG; THANGAPANDIAN, WINSTON; ARUMUGAM, VALANTINA
To: AMERICAN MEGATRENDS INTERNATIONAL, LLC
Reel/Frame 064300/0543 →