Abstract: The disclosure provides a method for verifying authenticity of a component in a product. The method may comprise collecting data relating to a characteristic of the component. The method may further comprise comparing the data to a profile for the component. The profile may comprise an expected characteristic for the component. The method may further comprise determining whether the collected data matches the expected characteristic. The disclosure further provides an apparatus and program.

Abstract: In an example, a method includes receiving an indication of an electrical parameter associated with at least part of a computing device. The method further includes determining whether or not the indication is indicative of an expected electric field distribution associated with a specified hardware configuration for the computing device.

Abstract: In an example, a tangible machine-readable medium includes instructions which, when executed on at least one processor, cause the at least one processor to obtain an attestation public key bound to an identity associated with a root of trust of a platform. The instructions further cause the at least one processor to obtain a trusted time stamp associated with data collection by the platform. The instructions further cause the at least one processor to generate a signed measurement based on a trusted input as a nonce.

Abstract: In an example, a method includes receiving an indication of an electrical parameter associated with at least part of a computing device. The method further includes determining whether or not the indication is indicative of an expected electric field distribution associated with a specified hardware configuration for the computing device.

Abstract: The present disclosure relates to methods, devices, and computer-readable media. In an example there is disclosed a method comprising detecting a state of a computing device, the computing device comprising at least one component. The method may further comprise comparing the detected state with a certified state of the device, the certified state indicating an expected state of the device as certified by a trusted authority. The method may further comprise, in response to the detected state and the certified state being different, identifying a component as a source of the difference and checking, by the trusted authority, whether the component is legitimate or not. The method may further still comprise, in response to the component being legitimate, certifying the difference and updating the certified state.

Abstract: The disclosure provides a method for verifying authenticity of a component in a product. The method may comprise collecting data relating to a characteristic of the component. The method may further comprise comparing the data to a profile for the component. The profile may comprise an expected characteristic for the component. The method may further comprise determining whether the collected data matches the expected characteristic. The disclosure further provides an apparatus and program.

Abstract: A system and method for addressing split modes of persistent memory are described herein. The system includes a non-volatile memory comprising regions of memory, each region comprising a range of memory address spaces. The system also includes a memory controller (MC) to control access to the non-volatile memory. The system further includes a device to track a mode of each region of memory and to define the mode of each region of memory. The mode is a functional use model.

Abstract: A method for secure hardware initialization during a start-up process comprises activating a protected portion of a physical memory, allocating a part of the protected portion of the physical memory for use by direct memory access, DMA, drivers and non-DMA related hardware initialization instructions, and using a memory management tool, allocating a first part of the physical memory, accessible by a device via the memory management tool, for use by data.

Abstract: Example implementations relate to attestation. For example, in an implementation, a target device attestation request is transmitted to a target device, where the target device attestation request includes an identity-based encryption (IBE) ciphertext and a retrieval index. The ciphertext is a nonce encrypted using a trusted platform module (TPM) public key together with an IBE public key. The TPM public key is retrieved from a TPM of the target device, and the IBE public key is an expected value presumed to be stored at the TPM.

Abstract: A method for secure hardware initialization during a start-up process comprises activating a protected portion of a physical memory, allocating a part of the protected portion of the physical memory for use by direct memory access, DMA, drivers and non-DMA related hardware initialization instructions, and using a memory management tool, allocating a first part of the physical memory, accessible by a device via the memory management tool, for use by data.

Abstract: Examples disclosed herein relate to computer system managements. Some of the examples disclosed herein enable identifying properties of a computer system and adjusting a degree of manageability of the computer system based on the properties of the computer system.

Abstract: Examples disclosed herein relate to selecting and loading firmware volumes. A computing device is booted to a state where the computing device is capable of accessing a memory available to multiple other computing devices. The memory includes multiple firmware volumes. In one example, at least one firmware volume is selected based on a hardware configuration or hardware components of the computing device. The selected firmware volumes are loaded.

Abstract: Examples disclosed herein relate to computer system managements. Some of the examples disclosed herein enable identifying properties of a computer system and adjusting a degree of manageability of the computer system based on the properties of the computer system.

Abstract: Examples disclosed herein relate to selecting and loading firmware volumes. A computing device is booted to a state where the computing device is capable of accessing a memory available to multiple other computing devices. The memory includes multiple firmware volumes. In one example, at least one firmware volume is selected based on a hardware configuration or hardware components of the computing device. The selected firmware volumes are loaded.

Abstract: Example implementations relate to attestation. For example, in an implementation, a target device attestation request is transmitted to a target device, where the target device attestation request includes an identity-based encryption (IBE) ciphertext and a retrieval index. The ciphertext is a nonce encrypted using a trusted platform module (TPM) public key together with an IBE public key. The TPM public key is retrieved from a TPM of the target device, and the IBE public key is an expected value presumed to be stored at the TPM.

Abstract: License management of firmware-controllable features in computer systems is described. In an example, a computer system includes: a plurality of hardware modules having a plurality of features capable of selective activation; firmware-based controllers distributed among the plurality of hardware modules having control points to control activation of the plurality of features; and a management module to obtain license data and communicate with the firmware-based controllers to configure the control points to activate at least one of the plurality of features as permitted by the license data.

Abstract: License management of firmware-controllable features in computer systems is described. In an example, a computer system includes: a plurality of hardware modules having a plurality of features capable of selective activation; firmware-based controllers distributed among the plurality of hardware modules having control points to control activation of the plurality of features; and a management module to obtain license data and communicate with the firmware-based controllers to configure the control points to activate at least one of the plurality of features as permitted by the license data.

Abstract: A system and method for addressing split modes of persistent memory are described herein. The system includes a non-volatile memory comprising regions of memory, each region comprising a range of memory address spaces. The system also includes a memory controller (MC) to control access to the non-volatile memory. The system further includes a device to track a mode of each region of memory and to define the mode of each region of memory. The mode is a functional use model.

Abstract: License management of firmware-controllable features in computer systems is described. In an example, a computer system includes: a plurality of hardware modules having a plurality of features capable of selective activation; firmware-based controllers distributed among the plurality of hardware modules having control points to control activation of the plurality of features; and a management module to obtain license data and communicate with the firmware-based controllers to configure the control points to activate at least one of the plurality of features as permitted by the license data.

Abstract: A computer system includes software running on a hardware platform. The hardware platform provides a platform manager having an user interface that is independent of that for a mission operating system running on said platform. The platform manager issues platform requests for power-setting adjustments. The software includes a mission operating system with a power controller incorporated in or running on the mission operating system. The power controller adjusts power settings for hardware devices at least in part as a function of the platform requests.