mbox series

[v1,0/6] HP WMI Security Features

Message ID 20220404203626.4311-1-jorge.lopez2@hp.com (mailing list archive)
Headers show
Series HP WMI Security Features | expand

Message

Jorge Lopez April 4, 2022, 8:36 p.m. UTC
These set of patches include new driver support of HP Security Features,
documentation, and other minor changes.

These changes include  documentation for three new security features
introduced in the hp-wmi driver. The security features include
Secure Platform, Management, Sure Admin, and Sure Start.
Each documentation section provides security feature description,
identifies sysfs directories, and files exposed by the driver.

Sure Admin allows the user to configure the system to use a Sure Admin
cryptographic signature-based authorization string that the BIOS will
use to verify authorization to modify the setting.
    
Sure Start provides advanced firmware protection and resiliency by
identifying and repairing unauthorized BIOS changes.  

Secure Platform Management (SPM)  replaces older password-based BIOS settings
management with public key cryptography.  PC secure product management
begins when a target system is provisioned with cryptographic keys that
are used to ensure the integrity of communications between system
management utilities and the BIOS.

Lastly, changes were introduced in preparation to submission of three
security features.  The addition of hp_wmi_groups will simplify the
integration of driver security features.
    

Jorge Lopez (6):
  Correct code style related issues in hp-wmi
  Update hp_wmi_group to simplify feature addition
  Secure Platform Management Security Feature
  Sure Start Security Feature
  Sure Admin Security Feature
  HP Security Features Documentation

 .../ABI/testing/sysfs-platform-hp-wmi         |   96 ++
 Documentation/admin-guide/hp_wmi.rst          |  141 ++
 Documentation/admin-guide/index.rst           |    1 +
 drivers/platform/x86/hp-wmi.c                 | 1298 ++++++++++++++++-
 4 files changed, 1535 insertions(+), 1 deletion(-)
 create mode 100644 Documentation/ABI/testing/sysfs-platform-hp-wmi
 create mode 100644 Documentation/admin-guide/hp_wmi.rst