Patent ID: 9262637
Filing Date: 2016-02-16
CPC Classification: G06F,H04L

Claim Text:
1. A method to be performed by a baseboard management controller (BMC) for verifying firmware integrity in a computing system, the method comprising: receiving a run-time reference measurement of a firmware object from a basic input/output system (BIOS), wherein the reference measurement is stored in a trusted platform module and the reference measurement is retrieved by the BIOS during a power-on self-test (POST); querying a system manager to locate a golden measurement, wherein the golden measurement is associated with the firmware in a guaranteed trust state; accessing the golden measurement of the firmware object based on the query, wherein the BMC can bypass the querying the system manager when the BMC is configured with the location of the golden measurement; and comparing the reference measurement with the golden measurement during a pre-operating system environment, wherein a policy action is applied when a variance is detected between the reference measurement and the golden measurement.