Abstract: An example apparatus is described for concurrent execution and copy of updated basic input/output system (“BIOS”) instructions. The apparatus may comprise a private serial peripheral interface and a processor to execute updated BIOS instructions. The apparatus may also comprise a controller to copy the updated BIOS instructions to the private serial peripheral interface. In various examples, execution and copy of the updated BIOS instructions may be performed concurrently.

Abstract: An example computing device incudes a main processor, a management firmware subsystem, and a controller to control operation of the management firmware subsystem. The controller is separate from a main processor. A memory stores subsystem data that is useable by the controller. The computing device further includes a set of instructions that determines a manufacturing mode of the computing device. The manufacturing mode is enabled when the computing device is under manufacture or maintenance. The manufacturing mode is disabled when the computing device is under normal operation. The set of instructions further determines a manufacturing state of the subsystem data. The manufacturing state indicates whether the subsystem data is complete. In response to determining that the manufacturing mode is disabled and that the manufacturing state of the subsystem data is incomplete, the set of instructions initiates a restoration of the subsystem data from a backup of the subsystem data.

Abstract: Examples include a CPU coupled to a controller, the CPU to receive a user credential usable by the login executable code to perform device login authentication, determine a first hash value based on the login executable code, determine a second hash value based on the user credential, obtain a third hash value and a fourth hash value from the controller, wherein the third hash value is a reference hash value for the login executable code, and wherein the fourth hash value is a reference hash value for the user credential, compare the first hash value to the third hash value, compare the second hash value to the fourth hash value, execute an OS login service using the login executable code responsive to the first hash value matching the third hash value and the second hash value matching the fourth hash value.

Abstract: An example electronic device includes a storage circuit, a central processing unit (CPU) coupled to the storage circuit, and a controller coupled to the storage circuit. The CPU is to receive a Basic Input/Output System (BIOS) update image for the electronic device, verify a signature of the BIOS update image, and responsive to verification of the BIOS update image, store a portion of the BIOS update image in the storage circuit. The controller is to obtain the portion of the BIOS update image from the storage circuit, and program the portion of the BIOS update image to a BIOS component of the electronic device.

Abstract: Examples of electronic devices are described herein. In some examples, an electronic device includes a flash memory. In some examples, the electronic device includes a basic input/output system (BIOS). In some examples, the electronic device includes a controller to unlock a region of the flash memory based on a message from the BIOS. In some examples, the electronic device includes an operating system (OS). In some examples, an application in the OS updates instructions in the region when the OS is loaded and the electronic device is in an awake state. In some examples, the controller locks the region after the update.

Abstract: Examples of electronic devices are described herein. In some examples, an electronic device includes a flash memory. In some examples, the electronic device includes a host memory to store an access control structure to access the flash memory. In some examples, the electronic device includes a first circuitry coupled to the host memory and the flash memory. In some examples, the first circuitry is to read the access control structure in the host memory to determine when to access the flash memory.

Abstract: Examples of electronic devices are described herein. In some examples, an electronic device includes a memory and a controller. In some examples, the controller is to enable a basic input/output system (BIOS) safe mode in response to an authentication procedure. In some examples, the controller is to provide access to back-up variable service region in the memory storing default BIOS data. In some examples, the controller is to start a modified BIOS based on the default BIOS data in response to enablement of the BIOS safe mode.

Abstract: Examples of electronic devices are described herein. In some examples, an electronic device includes a flash memory. In some examples, the electronic device includes a host memory to store an access control structure to access the flash memory. In some examples, the electronic device includes a first circuitry coupled to the host memory and the flash memory. In some examples, the first circuitry is to read the access control structure in the host memory to determine when to access the flash memory.

Abstract: An example computing device including a processor, a first non-volatile memory to store a first basic input/output system (BIOS) image, a second non- volatile memory, and a controller. The controller Is to receive encrypted location and size information of the first BIOS image from the processor, verify the received encrypted location and size information of the first BIOS image, verify a signature of the first BIOS image in the first non-volatile memory, control a backup process of the first BIOS image to the second non-volatile memory, verify the signature of the backed up first BIOS image in the second non-volatile memory, and in response to a successful verification of the signature, send a message to the processor to cause the processor to perform a boot process using the first BIOS image from the first non-volatile memory.

Abstract: An example computing device includes a controller to control operation of a firmware subsystem of the computing device. The controller is separate from a main processor of the computing device. A memory stores subsystem data that is useable by the controller. The subsystem data includes recovery information executable by the controller to initiate recovery of the subsystem. The computing device further includes recovery coordination instructions. The recovery coordination instructions determine integrity of the recovery information as stored on the memory and. In response to determining that the recovery information lacks integrity, the recovery coordination instructions initiate recovery of the firmware subsystem using a backup of the recovery information and perform recovery of the firmware subsystem using an update to the firmware subsystem.

Abstract: Examples associated with password updates are described. One example method includes receiving a request to modify an administrator password in a basic input/output system (BIOS). The administrator password may be updated. A first password tied to the administrator password may be identified. A first updated password is generated by concatenating a character string to the administrator password. The character string may be generated based on a password policy for the first password. The first password may then be updated to the first updated password.

Abstract: In some examples, an electronic device comprises a multiplexer, a first device interface coupled to the multiplexer, a second device interface coupled to the multiplexer, a storage controller coupled to the multiplexer, and a controller coupled to the first device interface. The storage controller is to control a storage device. The controller is to determine a mode based on a command for the controller to access the storage controller and, based on the mode, cause the multiplexer to adjust access of the second device interface to the storage controller.

Abstract: An example system with a pre-OS (Operating System) environment, the pre-OS environment includes a private memory that is isolated from a processor of the system. The pre-OS environment also includes an embedded controller (EC) coupled to the private memory, where the EC includes an embedded key. The EC is to execute instructions to generate an encryption key based on the embedded key; generate a signature key; obtain data; produce an integrity-verification tag based on a hash of the obtained data, where the hash employs the signature key; encrypt the obtained data based on the encryption key; store the encrypted data in the private memory; and store the integrity-verification tag in the private memory in association with the stored encrypted data.

Abstract: In some examples, a device includes a memory, a processor, and a controller separate from the processor to derive a security credential based on information comprising a key accessible by the controller. The controller communicates the derived security credential in a secure manner to a program code executable on the processor, and uses the derived security credential to protect data stored in the memory against unauthorized access.

Abstract: An apparatus includes a solid-state a solid-state non-volatile computer memory; and a controller coupled to the memory. The controller to: generate a data set including a tag that indicates that the data set is valid; write the data set into a block of the memory, wherein the block includes multiple addressable locations set to a common first binary value before the write; generate a subsequent data set including a tag that indicates that the subsequent data set is valid; update the tag of the written data set to indicate that the written data set is invalid, wherein the update includes setting an addressable location corresponding to the tag to second binary value different from the first binary value; write the subsequent data set to addressable locations in the block of memory other than the addressable locations of the invalid data set.

Abstract: An example system with a pre-OS (Operating System) environment, the pre-OS environment includes a private memory that is isolated from a processor of the system. The pre-OS environment also includes an embedded controller (EC) coupled to the private memory, where the EC includes an embedded key. The EC is to execute instructions to generate an encryption key based on the embedded key; generate a signature key; obtain data; produce an integrity-verification tag based on a hash of the obtained data, where the hash employs the signature key; encrypt the obtained data based on the encryption key; store the encrypted data in the private memory; and store the integrity-verification tag in the private memory in association with the stored encrypted data.

Abstract: Examples associated with password updates are described. One example method includes receiving a request to modify an administrator password in a basic input/output system (BIOS). The administrator password may be updated. A first password tied to the administrator password may be identified. A first updated password is generated by concatenating a character string to the administrator password. The character string may be generated based on a password policy for the first password. The first password may then be updated to the first updated password.

Abstract: In some examples, a device includes a memory, a processor, and a controller separate from the processor to derive a security credential based on information comprising a key accessible by the controller. The controller communicates the derived security credential in a secure manner to a program code executable on the processor, and uses the derived security credential to protect data stored in the memory against unauthorized access.

Abstract: An example computing device incudes a main processor, a management firmware subsystem, and a controller to control operation of the management firmware subsystem. The controller is separate from a main processor. A memory stores subsystem data that is useable by the controller. The computing device further includes a set of instructions that determines a manufacturing mode of the computing device. The manufacturing mode is enabled when the computing device is under manufacture or maintenance. The manufacturing mode is disabled when the computing device is under normal operation. The set of instructions further determines a manufacturing state of the subsystem data. The manufacturing state indicates whether the subsystem data is complete. In response to determining that the manufacturing mode is disabled and that the manufacturing state of the subsystem data is incomplete, the set of instructions initiates a restoration of the subsystem data from a backup of the subsystem data.

Abstract: An example computing device includes a controller to control operation of a firmware subsystem of the computing device. The controller is separate from a main processor of the computing device. A memory stores subsystem data that is useable by the controller. The subsystem data includes recovery information executable by the controller to initiate recovery of the subsystem. The computing device further includes recovery coordination instructions. The recovery coordination instructions determine integrity of the recovery information as stored on the memory and. In response to determining that the recovery information lacks integrity, the recovery coordination instructions initiate recovery of the firmware subsystem using a backup of the recovery information and perform recovery of the firmware subsystem using an update to the firmware subsystem.