Abstract: A method for securely updating a basic input/output system (BIOS) using a multi-layer scheme. A new BIOS image is received and stored at a computer system. In one embodiment, the new BIOS image is sent to the computer system in a BIOS capsule that also contains the data structure and instructions of how to build a new BIOS image for the computer system. The current BIOS image of the computer system is maintained in a first portion of the BIOS. An access check verifies the integrity of a data structure representation of the current BIOS image. An administration check verifies that proper authority has requested the BIOS update. A checksum is performed on the new BIOS image while writing the new BIOS image to a second portion of the BIOS. Once the new BIOS image passes the multi-layer check, indicia is provided such that the computer system loads BIOS instructions from the new BIOS image on subsequent boots of the computer system.

Abstract: A method for securely updating a basic input/output system (BIOS) using a multi-layer scheme. A new BIOS image is received and stored at a computer system. In one embodiment, the new BIOS image is sent to the computer system in a BIOS capsule that also contains the data structure and instructions of how to build a new BIOS image for the computer system.