Abstract: A secure Basic Input/Output System (BIOS) attribute system includes a secure server system coupled to a computing device through a network. The computing device receives a first BIOS attribute modification request, and authenticates the first BIOS attribute modification request using a first certificate that was previously stored in the computing device in response to validating the first certificate based on a key provided by the secure server system. In response to authenticating the first BIOS attribute modification request using the first certificate, the computing device modifies at least one BIOS attribute stored in the computing device.

Abstract: A bus allocation system includes at least one connector coupled to a plurality of devices, and a processing subsystem that includes at least one root port that is coupled to the at least one connector. The processing system executes instructions that are stored on a memory subsystem in order to provide a Basic Input Output System (BIOS) that is configured, during a boot process, to assign temporary bus values to each of the plurality of devices that are coupled to the connector. Based on the assigned temporary bus values, the BIOS detects each link that couples each of the plurality of devices to the connector, and determines a bus allocation count based on the detected links. The BIOS then allocates a number of buses for the at least one root port based on the bus allocation count.

Abstract: An information handling system may include one or more processors, a memory system communicatively coupled to the one or more processors, and a program of instructions embodied in non-transitory computer readable media and configured to, when read and executed by the one or more processors, create operating system level-mirroring of address spaces for data associated with one or more processes executing on the one or more processors and dynamically reallocate address spaces used for mirroring of the data for a process of the one or more processes from a first address space to a second address space responsive to a determination that a number of correctable bit errors of a memory page associated with the first address space exceeds a threshold.

Abstract: A boot process security system includes a processing system including a plurality of registers, and at least one memory system that includes instructions that, when executed by the processing system, cause the processing system to provide a BIOS. During a Driver eXecution Environment (DXE) sub-process that is included in a boot process and that occurs prior to passing control of the boot process to any third-party drivers, the BIOS programs at least one of the plurality of registers in order to configure at least one secure subsystem. The BIOS then verifies, during the boot process, that the at least one secure subsystem has been configured to provide a predetermined configuration, and locks the at least one secure subsystem. The BIOS then confirms that the at least one secure subsystem has been locked prior to passing control of the boot process to any third-party drivers.

Abstract: A bus allocation system includes at least one connector coupled to a plurality of devices, and a processing subsystem that includes at least one root port that is coupled to the at least one connector. The processing system executes instructions that are stored on a memory subsystem in order to provide a Basic Input Output System (BIOS) that is configured, during a boot process, to assign temporary bus values to each of the plurality of devices that are coupled to the connector. Based on the assigned temporary bus values, the BIOS detects each link that couples each of the plurality of devices to the connector, and determines a bus allocation count based on the detected links. The BIOS then allocates a number of buses for the at least one root port based on the bus allocation count.

Abstract: A BIOS platform configuration system includes a BIOS coupled to hardware subsystems. During initialization operations, the BIOS communicates with each of the hardware subsystems and retrieves respective hardware subsystem information that is associated with each of the hardware subsystems and that describes at least a portion of a communication route between that hardware subsystem and at least one other hardware subsystem. The BIOS then combines the respective hardware subsystem information that is associated with each of the hardware subsystems to generate configuration information that describes complete communication routes between each of the hardware subsystems, and configures at least one of the hardware subsystems using the configuration information.

Abstract: In one or more embodiments, one or more methods, processes, and/or systems may modify a configuration of an information handling system (IHS) to prevent access of a first non-volatile memory medium, associated with the IHS, that stores a recovery operating system; may boot the information handling system from a second non-volatile memory medium of the IHS; may determine that at least one issue associated with a boot sequence has occurred; may modify the configuration of the IHS to provide access of the first non-volatile memory medium; may modify the configuration of the IHS to boot the information handling system from the first non-volatile memory medium; may restart the IHS; and may boot the recovery operating system from the first non-volatile memory medium.

Abstract: In one or more embodiments, one or more systems, methods, and/or processes may determine multiple digital signatures of respective multiple portions of information handling system firmware that is stored in a non-volatile memory medium of an information handling system; may determine that the multiple digital signatures match respective multiple stored digital signatures; may receive contents of a complex logic device of the information handling system; may determine a digital signature of the contents of the complex logic device; may determine that the digital signature of the contents of the complex logic device does not match a stored digital signature associated with the complex logic device; and, in response to determining that the digital signature of the contents of the complex logic device does not match the stored digital signature associated with the complex logic device, may program the complex logic device with a complex logic device firmware image.

Abstract: An information handling system may include a plurality of processors, a basic input/output system (BIOS) comprising a program of instructions executable by one or more of the plurality of processors configured to, when executed, cause the one or more of the plurality of processors, to initialize one or more information handling resources of the information handling system, wherein the BIOS is further configured to receive a user selection of respective microcode versions desired to be loaded on each of the plurality of processors and cause each of the plurality of processors to load a respective microcode version in accordance with the user selection such that the respective microcode version loaded by a first of the plurality of processors is different than the respective microcode version loaded by a second of the plurality of processors.

Abstract: An information handling system may include one or more processors, a memory system communicatively coupled to the one or more processors, and a program of instructions embodied in non-transitory computer readable media and configured to, when read and executed by the one or more processors, create operating system level-mirroring of address spaces for data associated with one or more processes executing on the one or more processors and dynamically reallocate address spaces used for mirroring of the data for a process of the one or more processes from a first address space to a second address space responsive to a determination that a number of correctable bit errors of a memory page associated with the first address space exceeds a threshold.

Abstract: A method may be provided for use in an information handling system comprising a processor, one or more storage resources communicatively coupled to the processor, and a basic input/output system (BIOS) comprising a program of instructions executable by the processor and configured to cause the processor to initialize one or more information handling resources of the information handling system, the BIOS further configured to determine identities of each of the one or more storage resources and which of the one or more storage resources comprises a bootable operating system. The method may include receiving information regarding identities of each of the one or more storage resources and which of the one or more storage resources comprises a bootable operating system and communicating via the one or more management interfaces an alert indicating which of the one or more storage resources comprises the bootable operating system.

Abstract: In accordance with embodiments of the present disclosure, an information handling system may include a plurality of processing units and a plurality of slots, each slot configured to receive a corresponding information handling resource, and a program of instructions embodied in non-transitory computer-readable media and configured to, when read and executed by one of the respective processing units: enumerate the plurality of processing units and the information handling resources populated in the plurality of slots; create a processing unit to information handling resources mapping; and based on the mapping, determine whether a population of information handling resources in the plurality of slots is optimal.

Abstract: A lane reversal detection and bifurcation system includes an interface that includes a plurality of lanes that are coupled to an endpoint interface of an endpoint device and a BIOS that bifurcates the interface into a first root port and a second root port, such that the first root port is coupled to a first subset of the plurality of lanes, and the second root port is coupled to a second subset of the plurality of lanes. The BIOS initializes the endpoint device to establish a link between the endpoint device and the interface. The BIOS detects an endpoint presence and a non-functional link at the first root port and an endpoint presence and a functional link at the second root port and, in response, determines that the first subset of the plurality of lanes coupled to the endpoint device are subject to a lane reversal.

Abstract: A secure Basic Input/Output System (BIOS) attribute system includes a secure server system coupled to a computing device through a network. The computing device receives a first BIOS attribute modification request, and authenticates the first BIOS attribute modification request using a first certificate that was previously stored in the computing device in response to validating the first certificate based on a key provided by the secure server system. In response to authenticating the first BIOS attribute modification request using the first certificate, the computing device modifies at least one BIOS attribute stored in the computing device.

Abstract: Systems and methods are provided that may be implemented to execute firmware and to inject executable code images into the executing firmware that are extracted from a code injection module (CIM) so as to execute the injected code and/or binary images from the firmware implementation environment.

Abstract: Systems and methods are provided that may be implemented to execute firmware and to inject executable code images into the executing firmware that are extracted from a code injection module (CIM) so as to execute the injected code and/or binary images from the firmware implementation environment.

Abstract: Firmware authentication in Information Handling Systems (IHSs) are disclosed. In some embodiments, an IHS may include a controller having a memory, the memory configured to store a plurality of firmware volumes, each of the plurality of firmware volumes including a plurality of firmware files. The IHS may also include a Basic Input/Output System (BIOS) operably coupled to the controller, the BIOS having program instructions stored thereon that, upon execution, cause the BIOS to authenticate two or more firmware files within a given one of the plurality of firmware volumes using a single digital signature. In another embodiment, a method may include creating a firmware volume, adding a plurality of firmware files to the firmware volume, and creating a digital signature based upon at least one of the plurality of firmware files, where the digital signature, upon being authenticated, allows a BIOS to load any of the plurality of firmware files.

Abstract: A server chassis includes a server, a chassis management controller, and a local interface card. The server includes a controller that is configured to provide a remote user with access to a controller communication portal of the server via a remote access controller graphical user interface, and to send a message from the controller communication portal to a chassis management controller. The chassis management controller is configured to receive the message, to determine that the message is for a local interface card, and to send the message to the local interface card. The local interface card is configured to display the message on a screen connected to the local interface card, to detect a communication request, to display a communication interface at the screen, to receive a reply message via the communication interface, and to send the reply message to the chassis management controller.

Abstract: Firmware authentication in Information Handling Systems (IHSs) are disclosed. In some embodiments, an IHS may include a controller having a memory, the memory configured to store a plurality of firmware volumes, each of the plurality of firmware volumes including a plurality of firmware files. The IHS may also include a Basic Input/Output System (BIOS) operably coupled to the controller, the BIOS having program instructions stored thereon that, upon execution, cause the BIOS to authenticate two or more firmware files within a given one of the plurality of firmware volumes using a single digital signature. In another embodiment, a method may include creating a firmware volume, adding a plurality of firmware files to the firmware volume, and creating a digital signature based upon at least one of the plurality of firmware files, where the digital signature, upon being authenticated, allows a BIOS to load any of the plurality of firmware files.

Abstract: A server chassis includes a server, a chassis management controller, and a local interface card. The server includes a controller that is configured to provide a remote user with access to a controller communication portal of the server via a remote access controller graphical user interface, and to send a message from the controller communication portal to a chassis management controller. The chassis management controller is configured to receive the message, to determine that the message is for a local interface card, and to send the message to the local interface card. The local interface card is configured to display the message on a screen connected to the local interface card, to detect a communication request, to display a communication interface at the screen, to receive a reply message via the communication interface, and to send the reply message to the chassis management controller.