Abstract: An information handling system includes a general storage for storing application data of applications hosted by the information handling system. The information handling system also includes a management storage for storing management data used to manage operation of the information handling system. The information handling system further includes a management storage manager that obtains data for storage in the management storage; encrypts the data to obtain encrypted data and authentication data for the encrypted data; generates error correction code data for the encrypted data and the authentication data; and stores, as a new record, the encrypted data, the authentication data, and the error correction code data in the management storage.

Abstract: An information handling system includes a general storage for storing application data of applications hosted by the information handling system. The information handling system also includes a management storage for storing management data used to manage operation of the information handling system. The information handling system further includes a management storage manager that obtains data for storage in the management storage; encrypts the data to obtain encrypted data and authentication data for the encrypted data; generates error correction code data for the encrypted data and the authentication data; and stores, as a new record, the encrypted data, the authentication data, and the error correction code data in the management storage.

Abstract: An information handling system includes a graphics processing unit and an embedded controller. The embedded controller is communicatively coupled to the graphics processing unit, and executes instructions to perform one or more operations. The embedded controller to set an active count associated with a graphics processing unit to a predetermined value. The embedded controller to monitor an active pin of the graphics processing unit. The embedded controller to receive the temperature of the graphics processing unit from the temperature sensor. In response to the determination that the temperature of the graphics processing unit satisfies a first temperature threshold: the embedded controller to change a state in a power state table to a high power state based on the temperature of the graphics process unit and the active count, wherein the state of the power state table is associated with a central processing unit of the information handling system.

Abstract: An information handling system includes a graphics processing unit and an embedded controller. The embedded controller is communicatively coupled to the graphics processing unit, and executes instructions to perform one or more operations. The embedded controller to set an active count associated with a graphics processing unit to a predetermined value. The embedded controller to monitor an active pin of the graphics processing unit. The embedded controller to receive the temperature of the graphics processing unit from the temperature sensor. In response to the determination that the temperature of the graphics processing unit satisfies a first temperature threshold: the embedded controller to change a state in a power state table to a high power state based on the temperature of the graphics process unit and the active count, wherein the state of the power state table is associated with a central processing unit of the information handling system.

Abstract: In accordance with embodiments of the present disclosure, an information handling system may include a processor and a basic input/output system (BIOS). The BIOS may comprise a program of instructions executable by the processor and configured to cause the processor to initialize one or more information handling resources of the information handling system. The BIOS may further be configured to, during a boot of an information handling system, and in response to a request to set a password associated with the information handling system, generate a random password, securely store the random password in a memory such that the password may be retrieved during a subsequent boot of the information handling system by a user physically present at the information handling system, and set the random password as the password associated with the information handling system.

Abstract: An information handling system operating a BMU controller may include a rechargeable battery, a BMU controller to determine battery charge percentage value, a memory device for storage of an internal data record indicating a first power-on setting, and the controller operatively coupled to the memory memory device and the rechargeable battery. The controller executing machine-readable executable code instructions to determine that the main memory contains no internal data record indicating a first power-on event and to limit the voltage received by the rechargeable battery such that percentage value of the charge of the rechargeable battery does not exceed a set percentage value charge limit during storage and shipment of the information handling system.

Abstract: An information handling system operating a BMU controller may include a rechargeable battery, a BMU controller to determine battery charge percentage value, a memory device for storage of an internal data record indicating a first power-on setting, and the controller operatively coupled to the memory memory device and the rechargeable battery. The controller executing machine-readable executable code instructions to determine that the main memory contains no internal data record indicating a first power-on event and to limit the voltage received by the rechargeable battery such that percentage value of the charge of the rechargeable battery does not exceed a set percentage value charge limit during storage and shipment of the information handling system.

Abstract: Pre-validation of bootloader certificates for firmware bootloaders of an operating system boot list during a setup mode of BIOS boot initiation provides the end user with a tool to address boot certification problems associated with the firmware bootloaders before the operating system boot precludes execution of bootloaders that lack a valid certificate. For example, re-configuration of a boot list to address certification problems before exit of boot setup prevents boot to an inoperative state caused by lack of firmware execution during boot due to a failed certificate, such as a failure to load an unsigned option ROM.

Abstract: A method comprising may include storing, in a BIOS comprising a program of instructions executable by the processor and configured to cause the processor to initialize one or more information handling resources of an information handling system, a hardware profile of the information handling system, the hardware profile comprising identifying information of one or more information handling resources of the information handling system recorded during creation of the hardware profile. The method may also include, during a boot of the information handling system in a hardware verification mode, creating a new hardware profile comprising identifying information of the one or more information handling resources, comparing the new hardware profile to the hardware profile stored in the BIOS, and if the new hardware profile differs from the hardware profile stored in the BIOS, issuing an alert indicating potential tampering with hardware of the information handling system after creation of the profile.

Abstract: A method includes booting an information handling system, providing by an EFI of the information handling system a memory segment for a first EFI type memory access, reserving a first portion of the segment from access by an operating system of the information handling system, determining a size of the first portion, determining a size of a second portion of the segment based upon the size of the first portion, allocating a third portion of the segment for the first EFI type memory access, the third portion including the first portion and the second portion, and passing a memory map to the operating system, the memory map including the third portion, wherein the third portion is reserved from access by the operating system.

Abstract: A system and method for rendering a graphical setup display. A computer system comprises a first non-volatile storage device and a second non-volatile storage device. The first non-volatile storage device comprises a Basic Input/Output System (“BIOS”). The BIOS further comprises a BIOS graphical setup engine. The second non-volatile storage device comprises a setup image file containing a non-critical graphical setup image. The BIOS graphical setup engine selectively renders a basic graphical setup display omitting the non-critical image by using a set of pre-defined parameters stored in the first non-volatile storage device in place of the non-critical image if the non-critical image is not available, and renders an enhanced graphical setup display comprising the non-critical image contained in the setup image file stored in the second non-volatile storage device if the non-critical image is available.

Abstract: A secure display device includes a display and a decoder. The secure display device receives encoded content that includes information that encodes a secure image, and provides the encoded content to the decoder. The decoder decodes the encoded content to retrieve the secure image, and sends the secure image to the display. The display shows the secure image.

Abstract: Pre-validation of bootloader certificates for firmware bootloaders of an operating system boot list during a setup mode of BIOS boot initiation provides the end user with a tool to address boot certification problems associated with the firmware bootloaders before the operating system boot precludes execution of bootloaders that lack a valid certificate. For example, re-configuration of a boot list to address certification problems before exit of boot setup prevents boot to an inoperative state caused by lack of firmware execution during boot due to a failed certificate, such as a failure to load an unsigned option ROM.

Abstract: Information handling system secret protection is enhanced by encrypting secrets into a common file and breaking up the encrypted file into plural portions stored at plural memory devices, such as across plural DIMMs disposed in the information handling system. In one embodiment, a decryption key to decrypt the encrypted file is broken into plural portions stored at the plural memory devices. Upon detection of a predetermined security factor, such as an indication of removal of a the encrypted file is removed from the plural portions.

Abstract: Information handling system secret protection is enhanced by encrypting secrets into a common file and breaking up the encrypted file into plural portions stored at plural memory devices, such as across plural DIMMs disposed in the information handling system. In one embodiment, a decryption key to decrypt the encrypted file is broken into plural portions stored at the plural memory devices. Upon detection of a predetermined security factor, such as an indication of removal of a the encrypted file is removed from the plural portions.

Abstract: In accordance with at least some embodiments, a system includes a first processor and a second processor. The system also includes a boot task storage medium that can only be accessed by one processor at a time. A boot process of the system has a first stage and a second stage. During the first stage, the first processor fetches and executes boot tasks without assistance from the second processor. During the second stage, boot task execution performed by first processor overlaps with at least one boot task fetch performed by the second processor.

Abstract: A method includes booting an information handling system, providing by an EFI of the information handling system a memory segment for a first EFI type memory access, reserving a first portion of the segment from access by an operating system of the information handling system, determining a size of the first portion, determining a size of a second portion of the segment based upon the size of the first portion, allocating a third portion of the segment for the first EFI type memory access, the third portion including the first portion and the second portion, and passing a memory map to the operating system, the memory map including the third portion, wherein the third portion is reserved from access by the operating system.

Abstract: In accordance with embodiments of the present disclosure, an information handling system may include a processor and a basic input/output system (BIOS). The BIOS may comprise a program of instructions executable by the processor and configured to cause the processor to initialize one or more information handling resources of the information handling system. The BIOS may further be configured to, during a boot of an information handling system, and in response to a request to set a password associated with the information handling system, generate a random password, securely store the random password in a memory such that the password may be retrieved during a subsequent boot of the information handling system by a user physically present at the information handling system, and set the random password as the password associated with the information handling system.

Abstract: A method comprising may include storing, in a BIOS comprising a program of instructions executable by the processor and configured to cause the processor to initialize one or more information handling resources of an information handling system, a hardware profile of the information handling system, the hardware profile comprising identifying information of one or more information handling resources of the information handling system recorded during creation of the hardware profile. The method may also include, during a boot of the information handling system in a hardware verification mode, creating a new hardware profile comprising identifying information of the one or more information handling resources, comparing the new hardware profile to the hardware profile stored in the BIOS, and if the new hardware profile differs from the hardware profile stored in the BIOS, issuing an alert indicating potential tampering with hardware of the information handling system after creation of the profile.

Abstract: A method includes booting an information handling system, providing by an EFI of the information handling system a memory segment for a first EFI type memory access, reserving a first portion of the segment from access by an operating system of the information handling system, determining a size of the first portion, determining a size of a second portion of the segment based upon the size of the first portion, allocating a third portion of the segment for the first EFI type memory access, the third portion including the first portion and the second portion, and passing a memory map to the operating system, the memory map including the third portion, wherein the third portion is reserved from access by the operating system.