Abstract: A method may include, during a boot of an information handling system: determining, based on settings stored in non-volatile memory of the information handling system, whether to perform pre-commit execution of a firmware update image prior to committing the firmware update image to a motherboard of the information handling system, and responsive to determining to perform pre-commit execution, load the firmware update image from a basic input/output system partition of a storage resource of the information handling system and execute the firmware update image in lieu of a firmware image stored on the motherboard.

Abstract: A method may include, during a boot of an information handling system: determining, based on settings stored in non-volatile memory of the information handling system, whether to perform pre-commit execution of a firmware update image prior to committing the firmware update image to a motherboard of the information handling system, and responsive to determining to perform pre-commit execution, load the firmware update image from a basic input/output system partition of a storage resource of the information handling system and execute the firmware update image in lieu of a firmware image stored on the motherboard.

Abstract: Information handling system non-volatile random access memory (NVRAM) that stores operating system variables is managed to prevent a memory full condition by erasing selected portions of the NVRAM during operating system state transitions. If a first bank of NVRAM reaches a memory full condition threshold, active variables are copied to a second back of NVRAM and at least a portion of the first bank of NVRAM is erased during an operating system state transition from an on state to a reduced power and/or off state.

Abstract: Information handling system non-volatile random access memory (NVRAM) that stores operating system variables is managed to prevent a memory full condition by erasing selected portions of the NVRAM during operating system state transitions. If a first bank of NVRAM reaches a memory full condition threshold, active variables are copied to a second back of NVRAM and at least a portion of the first bank of NVRAM is erased during an operating system state transition from an on state to a reduced power and/or off state.

Abstract: Device drivers are provided from virtual media. System resources trap input/output data associated with the device drivers. Memory is allocated for the virtual media and populated with the device drivers using the input/output data. As an operating system installs, the virtual media is readable and is accessed for the device drivers.

Abstract: An information handling system includes a processor, a Unified Extensible Firmware Interface (UEFI) boot volume, and a memory including UEFI code and a setup module. The UEFI code is executable by the processor to boot the information handling system, determine if the UEFI boot volume includes a setup data file, and launch the setup module in response to determining that the UEFI boot volume includes the setup data file. The setup module is executable by the processor to read first information from the setup data file, and set a first configuration setting of the information handling system based upon the first information.

Abstract: Data to be stored at a firmware memory is received. A random symmetric encryption key is generated. The data is encrypted using the generated key to provide encrypted data. The encrypted data and the encryption key are both stored at the firmware memory.

Abstract: An information handling system includes a processor, a Unified Extensible Firmware Interface (UEFI) boot volume, and a memory including UEFI code and a setup module. The UEFI code is executable by the processor to boot the information handling system, determine if the UEFI boot volume includes a setup data file, and launch the setup module in response to determining that the UEFI boot volume includes the setup data file. The setup module is executable by the processor to read first information from the setup data file, and set a first configuration setting of the information handling system based upon the first information.

Abstract: An information handling system includes a processor configured to trap system management interrupts (SMIs) via a system management mode transfer monitor (STM), a first system resource, a SMI handler configured to operate within the STM, launch a first system management mode (SMM) virtual machine, load first SMM code for a first driver into the first SMM virtual machine, and associate the first SMM virtual machine with the first system resource and not with the second system resource.

Abstract: An information handling system includes a processor, a Unified Extensible Firmware Interface (UEFI) boot volume, and a memory including UEFI code and a setup module. The UEFI code is executable by the processor to boot the information handling system, determine if the UEFI boot volume includes a setup data file, and launch the setup module in response to determining that the UEFI boot volume includes the setup data file. The setup module is executable by the processor to read first information from the setup data file, and set a first configuration setting of the information handling system based upon the first information.

Abstract: An information handling system includes a processor configured to trap system management interrupts (SMIs) via a system management mode transfer monitor (STM), a first system resource, a SMI handler configured to operate within the STM, launch a first system management mode (SMM) virtual machine, load first SMM code for a first driver into the first SMM virtual machine, and associate the first SMM virtual machine with the first system resource and not with the second system resource.

Abstract: Device drivers are provided from virtual media. System resources trap input/output data associated with the device drivers. Memory is allocated for the virtual media and populated with the device drivers using the input/output data. As an operating system installs, the virtual media is readable and is accessed for the device drivers.

Abstract: An installation notification routine is initialized at a driver, the routine maintaining a count of installation notifications corresponding to a first global unique identifier (GUID) received at the driver. The driver registers for protocol installation notification corresponding to the first GUID. Malicious activity is identified in response to receiving more than one installation notification at the installation notification routine.

Abstract: Data to be stored at a firmware memory is received. A random symmetric encryption key is generated. The data is encrypted using the generated key to provide encrypted data. The encrypted data and the encryption key are both stored at the firmware memory.

Abstract: An information handling system includes a processor, a Unified Extensible Firmware Interface (UEFI) boot volume, and a memory including UEFI code and a setup module. The UEFI code is executable by the processor to boot the information handling system, determine if the UEFI boot volume includes a setup data file, and launch the setup module in response to determining that the UEFI boot volume includes the setup data file. The setup module is executable by the processor to read first information from the setup data file, and set a first configuration setting of the information handling system based upon the first information.

Abstract: An information handling system includes a processor configured to trap system management interrupts (SMIs) via a system management mode transfer monitor (STM), a first system resource, a SMI handler configured to operate within the STM, launch a first system management mode (SMM) virtual machine, load first SMM code for a first driver into the first SMM virtual machine, and associate the first SMM virtual machine with the first system resource and not with the second system resource.

Abstract: In accordance with the present disclosure, a system and method are herein disclosed for providing secure SMI memory services, including the protection of SMM memory from surreptitious attacks by, for example, rootkits. Information handling systems are susceptible to attacks, especially attacks on SMM memory. In one example, an SMI handler corresponding to the SMI Driver associated with an SMI interrupt performs validation of a password. An SSMS driver allocates memory for the SMI handler to use with the validation process and also performs a secure erase of allocated memory blocks upon completion of all secure SMI Memory Services. By controlling the validation and secure erase process through the use of the SMI handler and SSMS driver, information leakage can be prevented resulting in system data integrity.

Abstract: A method of using a counter stored in flash memory includes providing a base value field, a selector field, and a plurality of increment fields. The base value field represents a base value for the counter, and the selector field indicates a first one of the increment fields. The method further includes changing a bit of the first increment field from an erased value to a written value to indicate a change in a value stored in the counter.

Abstract: A method of using a counter stored in flash memory includes providing a base value field, a selector field, and a plurality of increment fields. The base value field represents a base value for the counter, and the selector field indicates a first one of the increment fields. The method further includes changing a bit of the first increment field from an erased value to a written value to indicate a change in a value stored in the counter.

Abstract: A method of using a counter stored in flash memory includes providing a base value field, a selector field, and a plurality of increment fields. The base value field represents a base value for the counter, and the selector field indicating a first increment field of the plurality of increment fields. The method further includes changing a bit of the first increment field from an erased value to a written value to indicate a change in a value stored in the counter.