Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus is an embedded-system device. The embedded-system device loads a first boot loader from a read only section of a storage device in an initialization process of the embedded-system device. The embedded-system device also loads, by the first boot loader, a public key from the read only section. The embedded-system device further generates a first verification code for static code and data stored in a first section of the storage device. The embedded-system device then decrypts, by the first boot loader, an encrypted signature stored in the first section by using the public key to obtain a second verification code. The embedded-system device determines integrity of the static code and data based on the first verification code and the second verification code.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and a computer system are provided. The computer system includes an initialization component of a host. The initialization component requests from a service processor of the host a first replacement firmware image of a first device of the host. The initialization component then receives the first replacement firmware image from the service processor. The initialization component further provides the first replacement firmware image to a first updating program. The initialization component uses the first updating program to replace the first existing firmware image on the first device with the first replacement firmware image.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus is an embedded-system device. The embedded-system device loads a first boot loader from a read only section of a storage device in an initialization process of the embedded-system device. The embedded-system device also loads, by the first boot loader, a public key from the read only section. The embedded-system device further generates a first verification code for static code and data stored in a first section of the storage device. The embedded-system device then decrypts, by the first boot loader, an encrypted signature stored in the first section by using the public key to obtain a second verification code. The embedded-system device determines integrity of the static code and data based on the first verification code and the second verification code.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and a computer system are provided. The computer system includes an initialization component of a host. The initialization component requests from a service processor of the host a first replacement firmware image of a first device of the host. The initialization component then receives the first replacement firmware image from the service processor. The initialization component further provides the first replacement firmware image to a first updating program. The initialization component uses the first updating program to replace the first existing firmware image on the first device with the first replacement firmware image.

Abstract: Certain aspects of present disclosure are directed the present disclosure relates to a baseboard management controller (BMC) implemented method of installation of operating system (OS) on a host computer using virtual storage of BMC. The method includes: (a) receiving a device request from the host computer to access a storage device, (b) simulating the storage device to host computer according to the device request, (c) receiving a data request command from host computer, (d) transferring requested data to the host computer according to the data request command, (e) receiving a data storage command from host computer directed to the simulated storage device and writing a status file at request of the data storage command, (f) determining if the status file exists in the simulated storage, and (g) stopping emulating the storage device to the host computer through the first communication interface if it is determined that the status file exists.

Abstract: Certain aspects of present disclosure are directed the present disclosure relates to a baseboard management controller (BMC) implemented method of installation of operating system (OS) on a host computer using virtual storage of BMC. The method includes: (a) receiving a device request from the host computer to access a storage device, (b) simulating the storage device to host computer according to the device request, (c) receiving a data request command from host computer, (d) transferring requested data to the host computer according to the data request command, (e) receiving a data storage command from host computer directed to the simulated storage device and writing a status file at request of the data storage command, (f) determining if the status file exists in the simulated storage, and (g) stopping emulating the storage device to the host computer through the first communication interface if it is determined that the status file exists.