Patent ID: 8301907
Filing Date: 2012-10-30
Classification: G06F

Abstract:
1. A computing system comprising: a first central processing unit (CPU); a BIOS; a system service processor (SSP), and memory for storing confidential information, wherein a virtual machine monitor (VMM) executed by the first CPU is configured to protect confidential information stored in memory by implementing a secured environment; wherein in response to initiation of a hot-plug process involving the physical addition of a second CPU to the computing system without requiring reboot, the SSP applies power to the second CPU, and holds the second CPU in a reset state until it is determined that the second CPU is supported in the secured environment; wherein in response to a determination by the SSP that the second CPU is supported in the secured environment, the SSP configures the computing system to allow the second CPU to access the BIOS; wherein in response to said access to the BIOS, the second CPU executes a trustworthiness determination to determine whether the BIOS can be trusted; further wherein in response to the determination that the second CPU is supported in the secured environment and a determination that the BIOS comprises a signed authenticated module (ACM), notifying the VMM that the second CPU is configured to match a state expected by the secured environment and the second CPU resource is available; in response to the notification the VMM sends a startup interrupt to the second CPU to configure the second CPU's internal state; and wherein in response to the configuration of the second CPU, the VMM allows the second CPU to operate within the secured environment.