Abstract: Embodiments support establishing an embedded controller comprised within an Information Handling System (IHS) as a hardware root of trust. With the booting of the IHS paused and based on instructions encoded in a ROM (Read-Only Memory) of the embedded controller, the firmware of the embedded controller is read from a flash memory, such as a SPI Flash, and stored to a RAM (Random Access Memory) of the embedded controller. The firmware is then authenticated based on instructions encoded in the ROM. Based on instructions included in the authenticated firmware, the embedded controller reads SBIOS (Startup Basic Input Output System) instructions from the flash memory and stores them to RAM where they are authenticated based on instructions included in the authenticated embedded controller firmware. If the SBIOS instructions are authenticated, the embedded controller authorizes booting of the IHS to resume using the authenticated SBIOS instructions.

Abstract: An information handling system (IHS) may include a platform controller hub (PCH), an embedded controller (EC) configured to execute a boot block stored in ROM to initiate a boot process for the IHS, a Flash memory device configured to store EC application firmware, boot firmware and backup boot firmware, which is substantially identical to the boot firmware, and an SPI bus that directly connects the EC to the Flash memory device during a portion of the boot process when the PCH is in reset. The EC uses the SPI bus to access the Flash memory device, retrieve the EC application firmware stored therein, store a local copy of the EC application firmware in internal RAM and execute the local copy of the EC application firmware while the PCH is in reset. The EC application firmware stored in RAM includes boot recovery firmware, which may be executed by the EC to restore the boot firmware if the boot firmware is damaged or corrupt.

Abstract: An information handling system (IHS) may include a platform controller hub (PCH), an embedded controller (EC) configured to execute a boot block stored in ROM to initiate a boot process for the IHS, a Flash memory device configured to store EC application firmware, boot firmware and backup boot firmware, which is substantially identical to the boot firmware, and an SPI bus that directly connects the EC to the Flash memory device during a portion of the boot process when the PCH is in reset. The EC uses the SPI bus to access the Flash memory device, retrieve the EC application firmware stored therein, store a local copy of the EC application firmware in internal RAM and execute the local copy of the EC application firmware while the PCH is in reset. The EC application firmware stored in RAM includes boot recovery firmware, which may be executed by the EC to restore the boot firmware if the boot firmware is damaged or corrupt.

Abstract: Embodiments support establishing an embedded controller comprised within an Information Handling System (IHS) as a hardware root of trust. With the booting of the IHS paused and based on instructions encoded in a ROM (Read-Only Memory) of the embedded controller, the firmware of the embedded controller is read from a flash memory, such as a SPI Flash, and stored to a RAM (Random Access Memory) of the embedded controller. The firmware is then authenticated based on instructions encoded in the ROM. Based on instructions included in the authenticated firmware, the embedded controller reads SBIOS (Startup Basic Input Output System) instructions from the flash memory and stores them to RAM where they are authenticated based on instructions included in the authenticated embedded controller firmware. If the SBIOS instructions are authenticated, the embedded controller authorizes booting of the IHS to resume using the authenticated SBIOS instructions.