88 results about "Option ROM" patented technology

In some embodiments, the invention involves using a policy engine during boot, in the driver execution environment (DXE) phases to authenticate that drivers and executable images to be loaded are authenticated. Images to be authenticated include the operating system (OS) loader. The policy engine utilizes a certificate database to hold valid certificates for third party images, according to platform policy. Images that are not authenticated are not loaded at boot time. Other embodiments are described and claimed.

Techniques to support co-location and certification of executable content from a pre-boot space into an operating system kernel mode runtime environment. The invention enables platform firmware runtime drivers to be loaded into memory as executable images during a pre-boot process and subsequently mapped into an operating system's runtime environment when the operating system is booted so as to enable runtime services provided by the platform firmware runtime drivers to be called via operating system interfaces. Prior to loading the executable images, a type certification check that compares type structure information corresponding to a runtime driver's opcode with type structure information corresponding to an operating system interface used to call the runtime driver may be performed. Additionally, a runtime driver file integrity verification may also be performed using a digital signature and associated key. The runtime driver may be loaded from various platform storage devices, including flash devices and option ROMs.

In some embodiments, the invention involves a system and method for invoking a series of hypervisors on a platform. A hardware-based secure boot of a chained series of virtual machines throughout the life of the pre-operating system (OS) firmware / BIOS / loader / option ROM execution, with component-wise isolation of the pre-extensible firmware interface (PEI) and driver execution environment (DXE) cores is utilized. In an embodiment, a Cache-As-RAM (CAR) based hypervisor, executing directly from Flash memory manages sequential invocation of a next hypervisor. Other embodiments are described and claimed.

A method and system for virtualizing images. Multiple images are shadowed (i.e., copied) into portions of the physical address space of system memory. A mapping mechanism is effected to map all of the images into a common virtual address space, wherein images in the virtual address space are overlapped, thus enabling the images to be logically stored in a portion of virtual memory having a size less than the aggregated size of the images. In some embodiments, the images comprise option ROM images, which are shadowed into system memory during the pre-boot of a computer system. Due to legacy requirements, the option ROM images must be logically located in a limited portion of virtual memory (i.e., the common virtual address space). The embodiments enable a large number of option ROM images to be shadowed at the same time. In one embodiment, system hardware is programmed by firmware to effect a dynamic mapping between virtual pages at which an image is logically located to physical pages where the image is physically located.

A system and method for initialization of a computer system is described. Faster initialization of a computer system is possible by allowing certain device driver initialization tasks to overlap with other initialization and operating system tasks. option-ROMs resident on hardware device drivers define the initialization tasks to be performed prior to device driver initialization. Initial computer code for booting the computing device, such as a BIOS, is executed. As option-ROMs for hardware devices are scanned and executed, specific device initialization information is accessed from the devices and placed in pre-defined buffer areas. These accesses occur in parallel to other start up tasks. When device drivers are loaded, some of their initialization has already completed, thereby shortening the time necessary to boot the system.

A method and apparatus to execute a pre-boot application within an emulated pre-boot environment to test functionality of the pre-boot application. The emulated pre-boot environment is executed within a user mode of an operating system (“OS”) during an OS runtime of the processing system. The pre-boot application interacts with a hardware device of the processing system via a kernel proxy agent. The kernel proxy agent executes in a kernel mode of the OS.

Option ROM updates are performed in a secure manner with centralized control through system initialization firmware, such as the system BIOS. An option ROM updater manages copying an option ROM update to an auxiliary subsystem if an update bit is set, such as by a secure system management interface with the BIOS. Upon detection of an update bit, the option ROM updater unlocks a write protect at the auxiliary subsystem firmware and copies an option ROM update to the auxiliary subsystem to update the option ROM. After completing the option ROM update, the option ROM updater locks write protection of the option ROM to maintain system security.

Option ROMs associated with information handling system processing components is selectively disabled to reduce the time associated with one or more boots of the information handling system, such as during deployment of applications after manufacture of the information handling system. An Option ROM selector module identifies one or more Option ROMs to disable at a boot, such as Option ROMs associated with processing components that are not needed for deployment of applications, and communicates the disabled Option ROMs to an Option ROM boot execution controller of the information handling system, such as with SMBIOS tokens. At a subsequent boot, the Option ROM execution controller prevents the BIOS from loading disabled Option ROMs for execution so that boot time is reduced with impact to the deployment of applications.

In some embodiments, the invention involves using a policy engine during boot, in the driver execution environment (DXE) phases to authenticate that drivers and executable images to be loaded are authenticated. Images to be authenticated include the operating system (OS) loader. The policy engine utilizes a certificate database to hold valid certificates for third party images, according to platform policy. Images that are not authenticated are not loaded at boot time. Other embodiments are described and claimed.