Abstract: A method, an information handling system (IHS) and a validation system for validating an image using an embedded hash. The method includes retrieving, via a controller, a first image from a first memory device and extracting a first hash from a first location within the first image. The first hash was previously generated using an original set of data that includes a first data string, and the first image includes the first hash inserted into the first location to replace the first data string. The method includes retrieving a copy of the first data string. The method further includes generating a second image by inserting the first data string into the first location from which the first hash was extracted such that the second image contains the original set of data. The method further includes validating the first image using the first hash and the second image.

Abstract: An information handling system includes a host processing complex with a memory, and a baseboard management controller (BMC) with a processor and a video capture and difference engine (VCDE). The processor receives a memory compare command. The memory compare command includes a first pointer to a first block of the memory, a second pointer to a second block of the memory, and a memory block size. The processor further determines whether the memory block size is greater than a threshold, and forwards the memory compare command to the VCDE when the memory block size is greater than the threshold. The VCDE compares contents of the first block to contents of the second block in response to receiving the memory compare command.

Abstract: A method and an information handling system (IHS) for authenticating boot path updates in an IHS. The method includes initializing, by an image loader of the IHS, a current boot path associated with a first image. The method also includes detecting, by a processor of the IHS, detecting an attempt to update the current boot path to utilize a second image that is different from the first image. The method further includes, in response to detecting the attempt to update the current boot path, initializing a pre-authentication process to authenticate the second image. The method further includes, in response to the pre-authentication process authenticating the second image, updating the current boot path to utilize the second image and enabling a subsequent boot of the IHS using the second image.

Abstract: An information handling system includes a host processing complex with a memory, and a baseboard management controller (BMC) with a processor and a video capture and difference engine (VCDE). The processor receives a memory compare command. The memory compare command includes a first pointer to a first block of the memory, a second pointer to a second block of the memory, and a memory block size. The processor further determines whether the memory block size is greater than a threshold, and forwards the memory compare command to the VCDE when the memory block size is greater than the threshold. The VCDE compares contents of the first block to contents of the second block in response to receiving the memory compare command.

Abstract: A method and an information handling system (IHS) for authenticating boot path updates in an IHS. The method includes initializing, by an image loader of the IHS, a current boot path associated with a first image. The method also includes detecting, by a processor of the IHS, detecting an attempt to update the current boot path to utilize a second image that is different from the first image. The method further includes, in response to detecting the attempt to update the current boot path, initializing a pre-authentication process to authenticate the second image. The method further includes, in response to the pre-authentication process authenticating the second image, updating the current boot path to utilize the second image and enabling a subsequent boot of the IHS using the second image.

Abstract: A method, an information handling system (IHS) and a validation system for validating an image using an embedded hash. The method includes retrieving, via a controller, a first image from a first memory device and extracting a first hash from a first location within the first image. The first hash was previously generated using an original set of data that includes a first data string, and the first image includes the first hash inserted into the first location to replace the first data string. The method includes retrieving a copy of the first data string. The method further includes generating a second image by inserting the first data string into the first location from which the first hash was extracted such that the second image contains the original set of data. The method further includes validating the first image using the first hash and the second image.