UEFI Firmware Security Concerns and Best Practices

Title: UEFI Firmware Security Concerns and Best Practices Author: Jim Mortensen Created Date: 7/17/2018 5:39:07 PM

  Practices, Best, Best practices

Platform Initialization (PI) Specification Volume 1: Pre ...

Platform Initialization Specification, Vol. 1 Version 1.6 May 2017 vii 1.2 Errata C • 550 Naming conflicts w/ PI SMM • 571 duplicate definition of EFI_AP_PROCEDURE in DXE MP (volume2)

  Specification, Volume, Platform, Initialization, Platform initialization, Specification volume

UEFI Firmware Security Concerns and Best Practices

presented by UEFI Firmware Security Concerns and Best Practices Fall 2017 UEFI Plugfest October 30 –November 3, 2017 Presented by Dick Wilkins, PhD & Jim Mortensen

  Security, 2017, Practices, Best, Concern, Firmware, Firmware security concerns and best practices

Microsoft Update for Windows Security

Agenda •Security for Everyone •Windows 10 Security Features •Additional Firmware Considerations •Summary and Call to Action UEFI Plugfest - March 2016 www.uefi.org 2

  Microsoft update for windows security

Using the UEFI Shell

UDK2010 (EDK II) Some Insyde customers are shipping InsydeH2O EDK II BIOS now! Insyde is fully engaged and aligned with Intel Client, Server, and SSG on UDK2010 - Active Intel development partner on UDK2010 Insyde will provide a smooth transition from EDK1117 to UDK2010 - Adding support for the new specifications - Improving the industry

  Using, Support, Shell, Uefi, Using the uefi shell, Edk ii

Advanced Trusted Platform Module (TPM) Usage

TPMs have been commonly used on x86 systems since the first TPM TPM usage has been well defined on x86 •Communication with the TPM has been on a fixed MMIO address •In addition to HW TPM’s from several vendors, both AMD and Intel have even developed their own forms of firmware based TPMs OS vendors like Microsoft and the Linux community ...

  Advanced, Trusted, Module, Usage, Platform, Tpms, Advanced trusted platform module

Advanced Configuration and Power Interface Specification

6.1 1490 ACPI Version update to reflect 6.1 versus 6.0 Table 5-34 6.1 1483 NFIT SPD extensions and clarifications Section 5.2.25x, Section 6.5.9, Section 9.20x 6.1 1478 Wireless Power Calibration ACPI Device Section 10.5 & Section 10.6 6.1 1427 Addition to Memory Device State Flags in NFIT Table 5-130

  Configuration, Power, Advanced, Interface, Apic, Advanced configuration and power interface

Advanced Configuration and Power Interface (ACPI ...

Advanced Configuration and Power Interface (ACPI) Specification. Version 6.3 January 2019. ACPI Specification, Version 6.3 UEFI Forum, Inc. January 2019 Page ii Acknowledgements The material contained herein is not a license, either expressly or impliedly, to any intellectual property owned or ... ACPI . ACPI Specification, Version 6.3

  Configuration, Power, Advanced, Interface, Apic, Advanced configuration and power interface

System Firmware and Device Firmware Updates using …

–Platform firmware and device firmware (ESRT/FMP) –Multiple authentication keys & test key detection –Improved UX and system update pre-checks • Simplified capsule generation (Python script) • Supports OS-based firmware update workflow –Model Based Servicing via Microsoft Windows Update –Linux Vendor Firmware Service (LVFS) via ...

  Update, Firmware, Firmware update

UEFI Shell Specification

1 Version 2.0 1 Introduction 1.1 Overview The UEFI Shell environment provides an API, a command prompt and a rich set of commands that extend …

  Shell, Uefi, Uefi shell

UEFI System Utilities User Guide for HPE ProLiant Gen10 ...

Enabling or disabling the Embedded UEFI Shell ..... 101 Adding the Embedded UEFI Shell to the UEFI Boot Order list ..... 101 Enabling or disabling automatic execution of the Embedded UEFI Shell startup script . 102

  Guide, User, System, Shell, Utilities, Uefi, Uefi shell, Uefi system utilities user guide for

HP Thin Clients

UEFI Secure Boot that is available on both Windows Embedded OS and HP ThinPro. A highly-secure, hardware-backed vault for storing and protecting authentication data. Physically secure your assets with solutions such as hardware cable lock, and secure7 port cover8. Identity security Active Directory integration with HP ThinPro Multi-factor ...

  Uefi

Using the UEFI Shell

EFI and UEFI 2.0 Shell scripts are compatible Additional features in UEFI 2.0 Scripts - Query if commands are available - Command features are consistent with EFI Shell Old Shell Protocols deprecated UEFI Shell Protocols added - EFI Shell extensions require porting - …

  Using, Shell, Uefi, Using the uefi shell, Uefi shell

the GNU GRUB manual

the GNU GRUB manual The GRand Unified Bootloader, version 2.06, 10 May 2021. Gordon Matzigkeit Yoshinori K. Okuji Colin Watson Colin D. Bennett

Contents

Access to UEFI settings is only possible by attaching a physical keyboard and mouse. This prevents being able to access UEFI via the Teams Rooms touch-enabled console as well as any other touch-enabled displays attached to Teams Rooms. Kernel Direct Memory Access (DMA) Protection is a Windows 10 setting that is enabled on Teams Rooms. With

  Content, Uefi