Abstract: An example apparatus is described for concurrent execution and copy of updated basic input/output system (“BIOS”) instructions. The apparatus may comprise a private serial peripheral interface and a processor to execute updated BIOS instructions. The apparatus may also comprise a controller to copy the updated BIOS instructions to the private serial peripheral interface. In various examples, execution and copy of the updated BIOS instructions may be performed concurrently.

Abstract: Examples include a CPU coupled to a controller, the CPU to receive a user credential usable by the login executable code to perform device login authentication, determine a first hash value based on the login executable code, determine a second hash value based on the user credential, obtain a third hash value and a fourth hash value from the controller, wherein the third hash value is a reference hash value for the login executable code, and wherein the fourth hash value is a reference hash value for the user credential, compare the first hash value to the third hash value, compare the second hash value to the fourth hash value, execute an OS login service using the login executable code responsive to the first hash value matching the third hash value and the second hash value matching the fourth hash value.

Abstract: An example electronic device includes a storage circuit, a central processing unit (CPU) coupled to the storage circuit, and a controller coupled to the storage circuit. The CPU is to receive a Basic Input/Output System (BIOS) update image for the electronic device, verify a signature of the BIOS update image, and responsive to verification of the BIOS update image, store a portion of the BIOS update image in the storage circuit. The controller is to obtain the portion of the BIOS update image from the storage circuit, and program the portion of the BIOS update image to a BIOS component of the electronic device.

Abstract: Examples of electronic devices are described herein. In some examples, an electronic device includes a flash memory. In some examples, the electronic device includes a host memory to store an access control structure to access the flash memory. In some examples, the electronic device includes a first circuitry coupled to the host memory and the flash memory. In some examples, the first circuitry is to read the access control structure in the host memory to determine when to access the flash memory.

Abstract: An example apparatus can receive a DMA request from a device, where the DMA request comprises an address and an ID of the device that uniquely identifies the device and wherein the device is a bus mastering device. The example apparatus can access a range of addresses using the ID of the device. An example apparatus can determine whether the address is in the range of addresses and can process the DMA request responsive to verifying that the address is in the range of addresses.

Abstract: Examples of electronic devices are described herein. In some examples, an electronic device includes a memory and a controller. In some examples, the controller is to enable a basic input/output system (BIOS) safe mode in response to an authentication procedure. In some examples, the controller is to provide access to back-up variable service region in the memory storing default BIOS data. In some examples, the controller is to start a modified BIOS based on the default BIOS data in response to enablement of the BIOS safe mode.

Abstract: An example of a first computing device may include firmware, a controller, and a processor. The processor may be to generate a trust state message, to be sent to the controller, indicating the firmware of the first computing device is operating a trusted environment and utilize the firmware to validate an update within the trusted environment. The controller may be to assert, responsive to receiving the trust state message, a trust state signal to a second computing device indicating the firmware of the first computing device is operating the trusted environment The assertion of the trust state signal may be to enable the second computing device to install the validated update.

Abstract: Examples of electronic devices are described herein. In some examples, an electronic device includes a basic input/output system (BIOS) and a processor. In some examples, the processor is to receive an enrollment message for a function of the electronic device from a server, and send the enrollment message to the BIOS. In some examples, the BIOS is to store the enrollment message in a BIOS memory. In some examples, the BIOS is to verify the enrollment message in response to a function activation request from the processor. In some examples, the processor is to enable the function based on a function activation response from the BIOS.

Abstract: Examples of electronic devices are described herein. In some examples, an electronic device includes a flash memory. In some examples, the electronic device includes a host memory to store an access control structure to access the flash memory. In some examples, the electronic device includes a first circuitry coupled to the host memory and the flash memory. In some examples, the first circuitry is to read the access control structure in the host memory to determine when to access the flash memory.

Abstract: An example computing device includes a non-volatile memory to store Basic Input/Output Systems (BIOS) data of the computing device, an audio codec, and a controller. The controller is to: receive a command from a provisioning device at the audio codec; and transfer a copy of the BIOS data between the controller and the memory based on the command.

Abstract: An example apparatus can receive a DMA request from a device, where the DMA request comprises an address and an ID of the device that uniquely identifies the device and wherein the device is a bus mastering device. The example apparatus can access a range of addresses using the ID of the device. An example apparatus can determine whether the address is in the range of addresses and can process the DMA request responsive to verifying that the address is in the range of addresses.

Abstract: An example computing device includes a controller to control operation of a firmware subsystem of the computing device. The controller is separate from a main processor of the computing device. A memory stores subsystem data that is useable by the controller. The subsystem data includes recovery information executable by the controller to initiate recovery of the subsystem. The computing device further includes recovery coordination instructions. The recovery coordination instructions determine integrity of the recovery information as stored on the memory and. In response to determining that the recovery information lacks integrity, the recovery coordination instructions initiate recovery of the firmware subsystem using a backup of the recovery information and perform recovery of the firmware subsystem using an update to the firmware subsystem.

Abstract: Examples associated with password updates are described. One example method includes receiving a request to modify an administrator password in a basic input/output system (BIOS). The administrator password may be updated. A first password tied to the administrator password may be identified. A first updated password is generated by concatenating a character string to the administrator password. The character string may be generated based on a password policy for the first password. The first password may then be updated to the first updated password.

Abstract: In some examples, an electronic device comprises a multiplexer, a first device interface coupled to the multiplexer, a second device interface coupled to the multiplexer, a storage controller coupled to the multiplexer, and a controller coupled to the first device interface. The storage controller is to control a storage device. The controller is to determine a mode based on a command for the controller to access the storage controller and, based on the mode, cause the multiplexer to adjust access of the second device interface to the storage controller.

Abstract: A storage may store machine-readable instructions for execution by a processor. Execution of the machine-readable instructions may cause the processor to receive an update capsule via a firmware update interface. The update capsule may include a device identifier and a payload. The payload may include data that is different from a firmware update. Execution of the machine-readable instructions may cause the processor to execute a virtual device handler, based on the device identifier, to process the payload.

Abstract: An example apparatus is provided. The example apparatus includes a component controller. The example apparatus includes a memory storage device associated with the component controller to store volatile data from the component controller and to store non-volatile data from the component controller in separate blocks of memory. The volatile data and the non-volatile data are to operate the component controller. The example apparatus also includes a memory controller in communication with the component controller and the memory storage device to write the volatile data from the component controller to the memory storage device. In addition, the example apparatus includes a central processor in communication with the memory storage device. The central processor is to execute a firmware variable service. The central processor is to receive the non-volatile data from the component controller. The non-volatile data is to be written to the memory storage device by the firmware variable service.

Abstract: An example of a first computing device may include firmware, a controller, and a processor. The processor may be to generate a trust state message, to be sent to the controller, indicating the firmware of the first computing device is operating a trusted environment and utilize the firmware to validate an update within the trusted environment. The controller may be to assert, responsive to receiving the trust state message, a trust state signal to a second computing device indicating the firmware of the first computing device is operating the trusted environment The assertion of the trust state signal may be to enable the second computing device to install the validated update.

Abstract: In some examples, a system includes a memory resource, a communication channel to allow a bus mastering capable device to access the memory resource, and a controller to block the system from responding to a request from the bus mastering capable device for accessing the memory resource until the controller has authorized the bus mastering capable device.

Abstract: Examples associated with password updates are described. One example method includes receiving a request to modify an administrator password in a basic input/output system (BIOS). The administrator password may be updated. A first password tied to the administrator password may be identified. A first updated password is generated by concatenating a character string to the administrator password. The character string may be generated based on a password policy for the first password. The first password may then be updated to the first updated password.

Abstract: An example computing device includes a controller to control operation of a firmware subsystem of the computing device. The controller is separate from a main processor of the computing device. A memory stores subsystem data that is useable by the controller. The subsystem data includes recovery information executable by the controller to initiate recovery of the subsystem. The computing device further includes recovery coordination instructions. The recovery coordination instructions determine integrity of the recovery information as stored on the memory and. In response to determining that the recovery information lacks integrity, the recovery coordination instructions initiate recovery of the firmware subsystem using a backup of the recovery information and perform recovery of the firmware subsystem using an update to the firmware subsystem.