Patent ID: 8516551
Filing Date: 2013-08-20
Classification: G06F,H04L

Abstract:
1. A method comprising: verifying firmware of a device coupled to a root complex bus and writing an authority measurement for the firmware in a table of the device, and setting a first device indicator in an integrity data structure of the device; after the first device indicator is set, accessing the table via a master coupled to the root complex bus to read the authority measurement, extending an authority platform configuration register (PCR) responsive thereto, and placing the device on a blacklist, to prevent the device from having access to at least one platform resource, the blacklist including a list of devices that have not been validated according to a multi-phase lockstep integrity protocol; responsive to the authority PCR extension, measuring an image manifest of the device, and writing a detail entry for the image manifest in the table; and accessing the table via the master to read the detail entry, extending a detail PCR responsive thereto, and removing the device from the blacklist.