Abstract: In one or more embodiments, a first information handling system may: receive a chained cryptographic hash value determined by a trusted platform module (TPM) of a second information handling system; receive multiple patch identities associated with multiple updated firmware installed on multiple components of the second information handling system; receive an event log associated with output of the TPM as the TPM determined the chained cryptographic hash value; retrieve multiple layered endorsements respectively associated with the multiple patch identities; determine multiple hash values from multiple signatures stored in the multiple layered endorsements; compare the chained cryptographic hash value with the event log; compare multiple event information with the multiple hash values; and determine that the second information handling system has booted into a trusted state based at least on comparing the chained cryptographic hash value with the event log and comparing the multiple event information with the

Abstract: A firmware update procedure for an accessory component may use a process that stages the firmware update in a separate component from the target accessory component being updated to reduce the memory requirements in the accessory component. Security measures can be used to prevent malicious users from accessing the firmware update while stored in the staging device prior to overwrite of firmware memory in the accessory component. These security measures can include public-private key signing and cryptographic hash calculations.

Abstract: A firmware update procedure for an accessory component may use a process that stages the firmware update in a separate component from the target accessory component being updated to reduce the memory requirements in the accessory component. Security measures can be used to prevent malicious users from accessing the firmware update while stored in the staging device prior to overwrite of firmware memory in the accessory component. These security measures can include public-private key signing and cryptographic hash calculations.