Patent ID: 8874922

Claim:
A system incorporating multilayered authentication of trusted platform updates, comprising: a processor; at least one firmware component coupled to the processor; a first cryptographic data, wherein the first cryptographic data corresponds to a previously verified firmware component; a personality module coupled to the processor, wherein the personality module comprises information specific to a system BIOS comprising at least information related to boot order and wherein the personality module stores the first cryptographic data; and an update policy, wherein the update policy is pushed to the personality module, and wherein the update policy reflects additional limitations on updates to the at least one firmware component comprising at least allowable versions of upgrade updates and downgrade updates; wherein the processor: retrieves the first cryptographic data from a personality module, determines second cryptographic data, wherein the second cryptographic data corresponds to an unverified firmware component, determines if the first cryptographic data matches the second cryptographic data, and allows an update of the at least one firmware component with the unverified firmware component if: the first cryptographic data matches the second cryptographic data, and the unverified firmware component includes a digital signature of a manufacturer.