US 11,989,300 B2
Firmware secure boot customization extensions
Ibrahim Sayyed, Georgetown, TX (US); and Richard M. Tonry, Austin, TX (US)
Assigned to Dell Products L.P., Round Rock, TX (US)
Filed by Dell Products L.P., Round Rock, TX (US)
Filed on Jul. 19, 2021, as Appl. No. 17/379,363.
Prior Publication US 2023/0021213 A1, Jan. 19, 2023
Int. Cl. G06F 21/57 (2013.01); G06F 21/31 (2013.01)
CPC G06F 21/572 (2013.01) [G06F 21/31 (2013.01)] 18 Claims
OG exemplary drawing
 
1. An information handling system comprising:
at least one processor;
memory circuitry comprising a Basic Input/Output System (BIOS), wherein the memory circuitry further comprises a database including a first set of one or more cryptographic keys usable to authenticate first code that is executable by the BIOS by verifying one or more first cryptographic signatures associated with the first code; and
a physical storage medium other than the memory circuitry, wherein the physical storage medium includes a custom database including a second set of one or more cryptographic keys usable to authenticate second code that is executable by the BIOS by verifying one or more second cryptographic signatures associated with the second code;
wherein the information handling system is configured to load a BIOS extension into the BIOS by:
determining that the first set of one or more cryptographic keys stored in the memory circuitry does not include any key usable to authenticate the BIOS extension;
determining that the second set of one or more cryptographic keys stored in the physical storage medium includes a particular key usable to authenticate the BIOS extension;
authenticating the BIOS extension via the particular key; and
in response to the authenticating, loading and executing the BIOS extension.