Insyde Presents on Implementing Secure Boot, Key and Database Configuration UEFIForum 2026-09-22 | Insyde Presents on Implementing Secure Boot, Key and Database Configuration
Challenges, Solutions and Benefits of Integrating Wireless Drivers in UEFI Firmware UEFIForum 2024-03-14 | Presented by Hemanth Venkatesh Murthy of Dell, this presentation discusses how adding new features into UEFI-based platform firmware commonly has challenges due to storage space constraints. Wireless Drivers, which are typically large compared to other UEFI Drivers, have additional challenges due to variants of a particular platform having different chipsets but common BIOS. The session discusses the solutions that were implemented in Dell BIOS to overcome the challenges and the benefits of integrating wireless drivers like Firmware-Over-The-Air (FOTA) and OS Recovery.
EDK2Code: VSCODE Extension for EDK2 UEFIForum 2024-02-22 | Presented by Guillermo Palomino Sosa of Intel, this presentation explores the EDK2Code Extension, a Visual Studio Code (VSCODE) extension for EDK2 developers missing Integrated Development Environment (IDE)-like features that are present for other popular development frameworks. The extension reads the compiled information or DSC files to provide full context of what has been integrated into the build process. With this information the extension provides the user with a new set of VSCODE commands to navigate through the source code. Some examples of commands are Goto Library definition, Goto INF file, Goto Library implementation, etc. The Extension also provides context and syntax support for EDK2 files and ACPI files. The EDK2Code Extension has been released as an open-source project and is available through the VSCODE marketplace. This webinar discusses the EDK2Code Extension, including its main commands and functionalities. A demo is also shown during this presentation to walk through the extension’s capabilities.VSCODE Marketplace: marketplace.visualstudio.com/items?itemName=intel-corporation.edk2code EDK2Code Wiki: github.com/intel/Edk2Code/wiki
Firmware Configuration - Past, Present, and Future UEFIForum 2023-11-28 | One of the most pervasive actions for firmware necessitates configuration for various boot flows without rebuilding the firmware. Configuration spans from venerable local setup screens through scripted out-of-band management, automated configuration, and provisioning. Since the early UEFI specification and its adoption of circa 2001 Intel HII with IFR and VFR, the industry has evolved in configuration practice. These evolutions include out-of-band standards like RedFish, FDT, USF YAML, FSP UPD, and UFFAF. This talk will review common classes of configuration workflows, survey of present practices, challenges, and open up the discussion to align these practices going forward.
Creating an EDK2 Firmware Image With an Embedded Application UEFIForum 2023-11-28 | AMD SEV-SNP (Secure Encrypted Virtualization, Secure Nested Paging) adds a functionality of measuring the OVMF by the AMD-PSP (Platform Secure Processor), but not the further boot stages. This created the opportunity of creating a fully measured computational environment as long as it can be fully contained inside the ROM and run by UEFI upon startup. The presentation will focus on creating a specialized EDK2 build that will allow making that happen. The solution is not tied to a specific application and fully supports GNU-EFI applications as workloads as well.
Extending EDK2 Functionalities to GNU-EFI UEFIForum 2023-11-28 | GNU-EFI is an alternate development environment made for creating EDK2 with the gnu gcc compiler. GNU-EFI applications have access to the official EDK2 API (Boot and Runtime Services), however they can’t link native EDK2 code. This creates an issue when attempting to use functions that are not a part of the API. The presentation will go through an explanation of how GNU-EFI handles edk2 API calls as well as how to extend it to port internal EDK2 functionality into it when needed, by the example of SEV-SNP page state change functions.
Multi-ISA Firmware Driver Compatability - Whats the Future? UEFIForum 2023-11-28 | Did you know Tiano today supports 4 64-bit architectures, yet plug-in device OpRoms are still mostly limited to x64 and CSM? While binary-translation approaches are a useful stop-gap solution for both AArch64 and RV64 ecosystems, we need a common approach that is not a technical debt nightmare and that will be adopted by IHVs and endorsed by OSVs. This talk goes over some of the possible approaches as a lead-in for an open discussion, UEFI Forum member feedback and suggestions.
UEFI Key Management Service (KMS) With TPM UEFIForum 2023-11-28 | The UEFI environment is a critical component of the modern computing platform. Key management is essential for securing the UEFI environment, as it allows for the secure storage and use of cryptographic keys. This session covers key management in the UEFI environment and provides an overview of different use cases and abstractions provided by the UEFI spec. We'll also explore implementation options and their strengths and weaknesses and present an in-depth view of the TPM-based Key Management Service. This session is for technical audiences interested in learning more.
Embracing Modularity and Boot-Time Configuration UEFIForum 2023-11-28 | Have you ever wondered how to simplify support for minor SoC/Chipset variations or have a common firmware image for multiple boards? Have you ever wished Tiano had better interfaces for supporting complex/composite platform devices, from onboards NICs to video output devices? Do you balk at moving your platform from U-Boot to Tiano? Then this talk is for you.
UEFI and ACPI in Arm System Architecture UEFIForum 2023-11-28 | This session provides a comprehensive update on how UEFI and ACPI technologies are used in the Arm System Architecture from servers to edge and IoT devices. Arm standardizes on three major recipes for system firmware: 1) Standard Base Boot Requirements using UEFI, ACPI and SMBIOS interfaces to support the generic off-the-shelf operating systems with backward/forward portability when combined with Arm Base System Architecture hardware requirements; 2) Embedded Based Boot requirements using a reduced set of UEFI and Devicetree interfaces to support embedded Linux operating systems with standard UEFI interfaces for secure boot and OTA; 3) LinuxBoot Base Boot Requirements using ACPI, SMBIOS and a minimum set of UEFI runtime services to support some cloud provider’s Linux distros. Sample implementations, such as EDK2, UBoot, Coreboot, to these recipes will be discussed.
Vulnerability Management in UEFI UEFIForum 2023-11-28 | The UEFI firmware supply chain plays a pivotal role in modern computing, yet vulnerabilities within it can have far-reaching consequences. This presentation examines the impact of vulnerabilities at different supply chain stages on a widening network of vendors. It also analyzes recent trends in UEFI vulnerability research and identifies persistent threat categories. The session provides a detailed overview of UEFI attack surfaces and explores challenges in remediating open-source component vulnerabilities. Drawing from experiences with the Tianocore EDK2 project, it discusses real-world obstacles and complexities. Central to the presentation is a discussion of strategies for UEFI supply chain vendors to proactively eliminate vulnerabilities. Special focus is placed on employing tools and automation in pre and post-release phases.
Call for Collaborative Action: CVSS V4.0 and Firmware Vulnerability Scoring UEFIForum 2023-11-28 | This talk will discuss the new, about to be released, CVSS V4.0 scoring system and how it has changed. Also, other developments in the scoring of software vulnerabilities. We will make a call to action for those involved in the platform/system firmware supply chain to coordinate our vulnerability scoring methodologies to insure consistent scores within our scope.
UEFI Goes to Washington UEFIForum 2023-11-28 | This session will provide an overview of how UEFI is built to meet and exceed United States Executive Orders and NISA, CISA and NSA security standards. The session will explore how secure software development practices, SBOM compliance, and novel implementations of UEFI technology can be leveraged to provide secure and compliant firmware that exceeds the modern software requirements from the US government.
A Conversation on Bolstering UEFI Cybersecurity UEFIForum 2023-11-28 | CISA has a broad Secure By Design and Default initiative cisa.gov/securebydesign. CISA recently published a blog post relating Secure By Design to UEFI and some opportunities for improvement (cisa.gov/news-events/news/call-action-bolster-uefi-cybersecuritynow). This session would introduce these discussions and foster a conversation with the UEFI community about sustaining and amplifying current efforts towards making UEFI and all its implementations Secure By Design and Default.
Hardening the Core: Enhanced Memory Protection UEFIForum 2023-11-28 | Taylor Beebe from the Microsoft Core UEFI team will talk about all things UEFI memory protections including recent design updates to make them runtime configurable and increase security posture. He’ll discuss changes made to the Windows boot loader to support memory protection, tests which have been created to check the integrity of UEFI memory, and problems still yet to be solved on the road to more secure firmware.
Evolving the Secure Boot Ecosystem UEFIForum 2023-11-28 | In this talk, we delve into pivotal areas shaping the future of secure boot processes and UEFI CA signing. Our exploration begins with a comprehensive overview of Secure Boot Certificate rolling, encompassing key essentials, current progress updates, and the persistent challenges encountered. Additionally, we dissect the impending shifts in Microsoft's requirements for UEFI CA signing, unraveling the emerging prerequisites and their implications. Furthermore, we reveal Microsoft's feature plans for Secure Boot, shedding light on how these advancements bolster system security. Join us to navigate the evolving landscape of system security and compliance.
Using SPDM in UEFI for Device Attestation UEFIForum 2023-11-28 | Security Protocol and Data Model (SPDM) is a DMTF defined industry standard for device authentication, provisioning, measurement collection, and secure communication. The UEFI specification 2.10 release describes how to perform device authentication in UEFI firmware. The TCG Platform Firmware Profile (PFP) Specification 1.06 release describes how to leverage SPDM to collect device measurements in the pre-boot phase. In this talk, we will introduce SPDM and how to apply it in EDKII firmware to support the mechanisms defined in UEFI 2.10 and TCG PFP 1.06. In addition, we will review a Microsoft Surface use case on making use of SPDM to interact with a Solid State Disk (SSD) device.
UEFI Ecosystem Investments and Open-Source Contributions UEFIForum 2023-11-28 | Join Michael Kubacki from Microsoft’s Core UEFI team for a comprehensive overview of the team’s recent endeavors within the UEFI ecosystem. A wide range of topics will be covered, from firmware security best practices to open-source firmware features and test tools. Along the way, Michael will highlight contributions made to the UEFI Forum and our future plans. Finally, you’ll see how all the pieces connect and can be demonstrated in an open-source virtual platform.
State of the UEFI Forum: UEFI Fall 2023 DevCon & Plugfest UEFIForum 2023-11-27 | UEFI Forum President Mark Doran of Intel recently presented “State of the UEFI Forum” at the recent UEFI Fall 2023 Developers Conference & Plugfest.This session provides an event overview, an update to the UEFI Forum, a specification update and an update to the UEFI security and open-source focus.
Universal Scalable Firmware: Evolutionary Aspects of Security UEFIForum 2023-03-21 | Presented by Vincent Zimmer and Jiewen Yao of Intel, this presentation covers Universal Scalable Firmware (USF), including security aspects. This talk focuses on the security and trust elements of USF and relation to others, including those in the UEFI Forum including ACPI, UEFI and PI. Additionally, this talk will cover key USF security topics like post quantum crypto and its impact on the firmware & UEFI, as well as OpenSSL and cryptographic libraries needed to build UEFI features.
UEFI Conformance Profiles: Enabling “Reduced Model” Implementations UEFIForum 2022-11-29 | When the UEFI specification was originally developed, it targeted traditional platforms (servers, desktops, and laptops) using general purpose operating systems. As migration to new platform types has occurred, firmware developers for emerging platform types have pointed out that some UEFI standard required interfaces may not be needed by some platform types. Implementing these unused interfaces and their supporting code can be an unnecessary burden to smaller and constrained devices such as those for the IoT, embedded, automotive and other markets. In this webinar, presenters Dick Wilkins (Phoenix Technologies) and Samer El-Haj-Mahmoud (Arm) will discuss the history behind the UEFI specifications and the rationale and benefits of adding in the new Conformance Profiles capability. We will explain how developers can leverage the Conformance Profile Table in the UEFI specification and review real world use cases
UEFI Support for Software Bill of Materials (SBOM) UEFIForum 2022-10-03 | Traditionally, capturing a Software Bill of Materials (SBOM) for UEFI firmware has been seen as challenging. Some technical challenges include immutable blobs in the image (e.g., Intel FSP and CPU microcode). Other roadblocks are due to a process where IHVs contribute binary DXE objects to the ODM. Finally, some challenges are due to commercial issues where code might be licensed from the IBV but modified by the ODM.This talk will focus on the following topics:- How to include accurate SBOM metadata that is compliant with NTIA’s The Minimum Elements for a Software Bill of Materials (SBOM) guidelines in a UEFI firmware project?- What edge conditions and use cases need to be considered when implementing SBOM?- What approaches can enable extracting and consuming SBOM data from one supply chain partner to another?The talk plans to address several industry-wide items necessary for a broader adoption of SBOM in the firmware ecosystem.
Using Python 3 in the UEFI Shell for Platform Security Analysis UEFIForum 2022-08-16 | EDK2 has accepted a port of Python 3.6.8 that can be used in the UEFI Shell. Chipsec has adopted it and it can now be used to run Chipsec's suite of tests against the platform. This presentation will show some of the changes that had to be made to the EDK2 version of the python interpreter that were necessary to run Chipsec. The presenters provide a brief overview of the Chipsec framework, some of its capabilities and why it's useful to everyone including but not limited to: IBVs, OEMs.
Tackling Security Through the Supply Chain UEFIForum 2022-05-17 | The process of addressing a firmware security issue can be long and complex. This webinar will provide recommendations for moving security updates into the field fast and addresses in detail the release process of typical firmware security fixes, starting from the initial disclosure from third parties to the processes of addressing the issues with the affected firmware and impacted ODM & OEM teams, all the way to public disclosure. Also addressed is the firmware supply chain’s impact on firmware patch cycles and how different approaches to these cycles can leave devices vulnerable.
Traceable Firmware Bill of Materials Overview UEFIForum 2021-12-08 | Today, firmware attacks are on the rise. A platform may have different firmware coming from multiple vendors. It is important to know the original source of these firmware components. Trusted Computer Group (TCG) published a set of specifications on reference integrity manifest (RIM) information models and firmware integrity measurement (FIM) to enable compliance with NIST SP 800-155 BIOS Integrity Measurements.In this presentation, the speakers will introduce the work to measure firmware at the component level and later use that as evidence for a traceable firmware Bill of Materials (BOM) for verification. This webinar will introduce two examples. The first example is how we provide Intel firmware support package (FSP) component measurement to help trace the Intel Firmware Support Package (FSP) binary. The second example is how we use Secure Protocol and Data Model (SPDM) protocol to communicate and record the device firmware measurement to trace the device firmware.
Beyond Printf – Real-Time UEFI Debugging UEFIForum 2021-10-27 | For debugging UEFI, print statements (“printf”) are often an engineer’s most powerful tool: some bugs are caused by complex sequences of events that are too long and intricate to root-cause using just breakpoints and watch windows. But printf has some drawbacks: its processing code can run hundreds of instructions in the target code being debugged, and this execution time added to the backpressure caused by transports such as serial console output can cause the performance of the boot code to slow significantly. This can mask timing-dependent bugs that are often the most intermittent or seemingly random. An at-speed version of print statements, enabled by the Intel Trace Hub, provides all the benefits of printf without the performance impact.This webinar will provide advanced examples on the use of at-speed printf in conjunction with other debugging and trace tools to triage intermittent bugs on Intel platforms.Recording Note: Please update your settings to 1080p for the best experience in viewing the video demo.
The Impact of Post Quantum Cryptography on UEFI BIOS UEFIForum 2021-07-27 | In order to resist the threat from quantum computers, National Institute of Standard and Technology (NIST) started the Post-Quantum Cryptography (PQC) project in 2016 and tried to define a set of new standard - quantum-resistant public-key cryptographic algorithms. The industry is evaluating the impact of adoption of these post quantum cryptography algorithms, such as network transport layer security (TLS) protocol. The UEFI BIOS includes a set of security feature that requires the cryptography, such as secured boot, capsule update, secure recovery, HTTPS boot, measured boot, etc.In this webinar, the speakers will introduce the impact of the PQC to the UEFI BIOS and the prototype work to adopt the PQC in the firmware area.
ACPI-Lite: Exploring a Simplified Mechanism for Abstracting Platforms with ACPI UEFIForum 2021-07-06 | This talk explores some strategies and approaches in defining a lighter-weight subset of ACPI. The end goal is to support more variance in hardware using less code, less overhead and less engineering time. The goal of the session is not to push a specific proposal, but to get the conversation started to help chart ACPI's future.
Understanding UEFI and PI Architectural Events UEFIForum 2021-05-19 | The presentation is inspired by the two new event groups introduced in UEFI 2.9 specification. It showcases the entire family of the UEFI and PI architectural events highlighting applicability and use cases of each event group. It also discusses best practices, do’s and don’ts and corner cases of event handler construction.
Best Practices for UEFI Secure Boot Customization UEFIForum 2021-04-15 | UEFI Secure Boot helps provide an effective defense against boot malware, but following today’s best practices in its implementation, deployment and configurability can help its increase its effectiveness against increasingly sophisticated exploits. This webinar will address how the latest recommendations for UEFI firmware from national security organizations can be leveraged to design secure devices that are able to meet stringent national security standards.Learn more about the UEFI Forum: uefi.org/Follow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
Compute Express Link 2.0 Update UEFIForum 2021-04-02 | Compute Express Link (CXL) is an open industry standard interconnect offering high-bandwidth, low latency connectivity between host processor and devices such as accelerators, memory buffers, and smart I/O devices. CXL 1.1 debuted in August 2019. Building on the industry success and acceptance of CXL as evidenced by the 130+ member companies with active participation, CXL Consortium announced the availability of CXL 2.0 in Nov. 2020. CXL 2.0 enables additional usage models while maintaining full backward compatibility with CXL 1.1.CXL 2.0 enhances the CXL specification in many areas: CXL Switch, persistent memory, standardized Memory Device interface, Hot-plug and link security. In this presentation, we will go over each of these areas and their implications to ACPI and UEFI interfaces as well as the UEFI Firmware Layer.
UEFI Debug with Intel Architectural Event Trace UEFIForum 2021-03-02 | Architectural Event Trace (AET) is a technology on modern Intel silicon that enables processors to provide real-time event trace information. AET differs from code execution trace, which is concerned with the path a processor takes through code; AET traces interactions between individual processors in a system and other processors, the BIOS, OS, device drivers, and external peripherals. Events such as hardware interrupts, exceptions, MSR reads/writes and many others can easily be traced with modern debuggers. And especially when used in conjunction with code execution trace, AET provides additional insight into the root causes of hardware, firmware and software issues.This webinar will provide advanced examples on the utility of AET and other debug and trace logic on Intel platforms.Presenter: Alan Sguigna (ASSET InterTech)Learn more about the UEFI Forum: uefi.org/Follow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: https://www.linkedin.com/company/uefi...
Arm SystemReady and the UEFI Firmware Ecosystem UEFIForum 2021-01-27 | Arm SystemReady is a new program bringing a level of consistency across a broad range of Arm-based devices in the cloud, in the network and in high-performance IoT (HPIoT) endpoints. It includes new set of standards and a compliance certification program, with the goal of ensuring that Arm systems "Just Work" with standard off-the-shelf operating systems and hypervisors. The program is based on a set of minimum hardware and firmware requirements. Firmware standards such as UEFI, ACPI, and SMBIOS are key elements in these requirements. This talk introduces the Arm SystemReady program, the Base Boot Requirements (BBR) and the Base Boot Security Requirements (BBSR) firmware specifications. The session show-cases enablement efforts for devices under this program, using open source firmware projects such as TianoCore and U-Boot. It also highlights open source firmware test suites used in SystemReady certification.Presenters: Samer El-Haj-Mahmoud (Arm) and Dong Wei (Arm)Learn more about the UEFI Forum: uefi.orgPresentation slides: bit.ly/2KfbnFrFollow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
Virtual Firmware for Intel Trust Domain Extensions UEFIForum 2020-12-17 | Intel® Trust Domain Extensions (Intel® TDX) introduce architectural elements to help deploy hardware-isolated, virtual machines (VMs) called trust domains (TDs). Intel TDX is designed to isolate VMs from the virtual-machine manager (VMM)/hypervisor and any other non-TD software on the platform to protect TDs from a broad range of software.This presentation introduces the architecture for TDX Virtual Firmware (TDVF), and the firmware reference implementation available in open source. The talk covers how TDVF runs from the TD reset vector, records runtime measurements, manages private memory, interacts with the Intel TDX module in Secure Arbitration Mode (SEAM), and loads the operating system (OS).Learn more about the UEFI Forum: uefi.orgPresentation slides: bit.ly/2KfbnFrFollow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
Firmware Integrity Measurements and Attestation UEFIForum 2020-10-23 | In 2011, the USG National Institute of Standards and Technology (NIST) published a draft of “BIOS Integrity Measurement Guidelines” (NIST Special Publication 800-155). For various reasons, these guidelines have not been widely accepted or implemented. Last year, NIST entered a collaboration with the Trusted Computing Group (TCG) to develop specifications that could be industry accepted and TCG has started publishing drafts of these specifications. This presentation will update the UEFI Forum membership on the status of this collaboration and how it will likely affect platform firmware.Learn more about the UEFI Forum: uefi.org/Presentation slides: bit.ly/2KfbnFrFollow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
Implementing and Using the UEFI Key Management Service (KMS) UEFIForum 2020-09-17 | The UEFI specification has had the Key Management Service (KMS) protocol definition since version 2.3.1 and provides services to generate, store, retrieve, and manage cryptographic keys. As normal, the specification provides just the definition for the service and the underlying implementation can vary. There are several implementation options to implement the KMS protocol. A simple implementation is to build it on top of something already in the system such as a TPM. The most practical implementation requires interfacing with a Key Management Interoperability Protocol (KMIP) Server over a secure network connection. This presentation will cover the high-level interactions between a UEFI firmware and a KMIP server to implement the UEFI KMS protocol and several real use cases of the KMS protocol in modern systems.Learn more about the UEFI Forum: uefi.org/Presentation slides: bit.ly/2KfbnFrFollow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
Driver Development with EDKII UEFIForum 2020-09-15 | The world of UEFI is unlike OS-based software ecosystems in several aspects and the difference can be daunting to a developer who is starting to write UEFI device drivers. This talk is aimed at junior independent hardware vendor (IHV) driver developers, at BIOS developers and at Integrators.The topics covered will include:• Common issues encountered and how to overcome them• Resources that proved valuable in development and maintenance:• Continuous Integration• Comprehensive Debugging Information• Documentation (EDKII and Yours)• Examples of interesting bugs encountered in the wildThe goal of this webinar is to illustrate some areas for improvement within our community and help junior driver developers overcome early difficulties.Learn more about the UEFI Forum: uefi.org/Presentation slides: bit.ly/2KfbnFrFollow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
Enabling Rust for UEFI Firmware - Webinar UEFIForum 2020-08-20 | This webinar will introduce work in progress to enable Rust, a modern language designed for memory safe operations, in EDK II. The session will also include use cases for Rust in EDK II, advantages of Rust when applied to firmware components, limitations in firmware environments and the types of issues that can be avoided by using a memory safe language in EDK II. Memory safety issues contributed to approximately 70% of recent security issues in software. In firmware, over 50% of reported issues in EDK II open source are related to memory safety.Learn more about the UEFI Forum: uefi.org/Presentation slides: bit.ly/2KfbnFrFollow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
Best Practices for Secure Firmware Patching - Webinar UEFIForum 2020-08-20 | Today firmware is ever-present, and although we understand the importance of updating firmware, there still isn't widespread adoption of best practices for updating firmware in the enterprise. Updating is critical to keeping systems safe and understandably why a firmware update plan is necessary, from both a system and device side. In this presentation, Insyde Software and Eclypsium address the topic of firmware updates and provide some best practices to add to an overall security strategy.Learn more about the UEFI Forum: uefi.org/Presentation slides: bit.ly/2KfbnFrFollow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
JTAG-Based UEFI Debug and Trace - Webinar UEFIForum 2020-07-15 | The IEEE Joint Test Action Group (JTAG) standards define debug, test and hardware validation technologies that are ingrained within much of today’s commercial silicon. In particular, platform debug is enabled by JTAG-based run-control (for example: halt, go, set breakpoint, single-step) and trace (for example: instruction trace, real-time UEFI “tool-hosted printf” message trace). On many systems, JTAG-based debugging is typically available from the very first instruction after CPU reset, allowing it to assist with development of early boot software that runs before any device or bus is initialized.This presentation will provide examples on the utility of JTAG-based UEFI debug and trace on x86 platforms.Learn more about the UEFI Forum: uefi.org/Presentation slides: bit.ly/2KfbnFrFollow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
Microsoft’s Continued Investments in the UEFI Ecosystem - Webinar UEFIForum 2020-07-15 | The webinar will include a summary of Microsoft’s continued investments into the business-critical UEFI ecosystem. This will include open source tools to improve developer efficiency (allowing more time for testing), open source continuous integration and unit testing in TianoCore, and an exploration of the “Code First” model including several case studies of new Windows features built upon open source Project Mu’s EDK2-based code, tests, & documentation.Learn more about the UEFI Forum: uefi.org/Presentation slides: bit.ly/2KfbnFrFollow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
TrenchBoot and GRUB - A Quick Introduction - Webinar UEFIForum 2020-06-18 | TrenchBoot is a cross-community OSS integration project for hardware-rooted, late launch integrity of open and proprietary systems. It reduces the attack surface exposed by the platform firmware. The presentation will introduce the TrenchBoot itself and later discuss how it compares to a UEFI secure boot and where it complements the secure boot. The webinar will also explore various challenges created by the UEFI environment for TrenchBoot but also for DRTM in general. Then the presentation will highlight some solutions to the discovered deficiencies discussed in the OSS community.Learn more about the UEFI Forum: uefi.org/Presentation slides: bit.ly/2KfbnFrFollow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
LinuxBoot Integration with UEFI Host Firmware Webinar UEFIForum 2020-06-18 | This webinar introduces LinuxBoot, its integration into host firmware solutions, provides current status and makes a proposal on how the UEFI firmware industry could embrace the challenges and opportunities that alternative firmware approaches introduce.Different from traditional enterprise, hyperscaler and cloud service providers have different requirements for host firmware. These differences prompted formation of the OCP (Open Compute Foundation) OSF (Open System Firmware) project.Facebook and its partners have been working together on LinuxBoot to enable Intel(R) Xeon Scalable Processor. As a starting point, we have completed proof of concept on Skylake generation and OCP Tioga Pass platform.Hyperscaler unique requirements are an opportunity for the multiple firmware communities to work together to streamline UEFI requirements, increase firmware accessibility, and explore additional ecosystem opportunities as OCP adoption increasesLearn more about the UEFI Forum: uefi.org/Presentation slides: bit.ly/2KfbnFrFollow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
Compute Express Link: Proposed Enhancements to UEFI and ACPI Specifications UEFIForum 2020-05-23 | Compute Express Link (CXL) is a new high-speed CPU-to-Device and CPU-to-Memory interconnect designed to accelerate next-generation data center performance. CXL is designed to be an industry open standard interface for high-speed communications, as accelerators and memory expanders are increasingly used to complement CPUs in support of emerging applications. The CXL 1.1 specification is already available, with work on future versions underway. CXL reinforces the need for standardization, with focus on technologies such as UEFI, ACPI and PCIe to provide the necessary interfaces between the firmware and the operating systems to support CXL new use cases of accelerators and memory expansion across different implementations. This presentation will first briefly introduce CXL 1.1 standard. It will then delve into the technical details of the proposed enhancements to the UEFI and ACPI specifications required for operating systems to manage CXL devices and ports in a system.Learn more about the UEFI Forum: uefi.org/Presentation slides: bit.ly/2KfbnFrFollow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
Building a System That “Just Works” – Arm Firmware Ecosystem UEFIForum 2020-05-23 | This webinar will provide an overview of the market reality of the boot system firmware on Arm systems, from servers to edge devices. It covers the range of firmware standards available for those systems, including Arm Trusted Firmware, SBBR (UEFI/ACPI), EBBR (UEFI on top of uboot), as well as LinuxBoot. The session also covers the evolution of the Arm firmware standards and the ServerReady program around UEFI and ACPI to design systems that “just work”, regardless of the segment.Learn more about the UEFI Forum: uefi.org/Presentation slides: bit.ly/2KfbnFrFollow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
Is your Pi “ServerReady”? Embracing UEFI and ACPI at the Edge UEFIForum 2020-05-01 | Firmware standards such as UEFI and ACPI are one of the foundational pillars for Arm servers, and a major reason for the continued growth of this horizontally-integrated ecosystem. Non-server "Edge" systems, however, are still an embedded-style vertically-integrated market, which is preventing at-scale adoption and proliferation of Arm-based Edge/IoT Compute.Thus, let's make "Arm Edge" as boring as "Arm Servers" and start with the iconic Raspberry Pi.This is a presentation and demo of VMware's and Arm's joint open effort to bring Arm ServerReady experiences to the Raspberry Pi 4 via community-developed SBBR (UEFI + ACPI) firmware. The session covers the history of the Pi UEFI port, current status and technical challenges that remain to be solved.Learn more about the UEFI Forum: uefi.org/Presentation slides: bit.ly/2KfbnFrFollow the UEFI ForumTwitter: twitter.com/UEFIForum LinkedIn: linkedin.com/company/uefi-forum
Understanding UEFI Testing Webinar UEFIForum 2020-01-29 | Presented by the UEFI Forum on January 29, 2020
UEFI Forum Webinar: How to Create a Secure Development Lifecycle for Firmware UEFIForum 2019-10-23 | Platform firmware is increasingly coming under attack. While firmware is essentially software, it operates in a different environment than most software and can have a greater impact if vulnerable to attack. The UEFI Forum has developed processes to help members protect their firmware from attack. This webinar will feature experts from the UEFI Forum who will describe best practices for creating a secure development lifecycle (SDL) for implementation of more secure firmware. Attendees will learn how to:Train your staffCreate secure designsSecurity conscious development for firmwareImplement testing that focuses on securityBest respond to security issues.The presenters will also briefly cover the UEFI Security Response Team (USRT) and what it can do for you.This Webinar aired on October 23, 2019. 9:00 - 10:00 a.m. PT.
UEFI Forum Webinar: The Role of Redfish in UEFI Forum Firmware Specifications UEFIForum 2019-07-17 | The UEFI Forum enables firmware innovation through industry collaboration and by promoting a standardized interface that simplifies and secures platform initialization and firmware bootstrap operations. The DMTF works to make it easier to manage network-accessible technologies through open and collaborative efforts by leading technology companies. DMTF’s Redfish® is a standard API designed to deliver simple and secure management for converged, hybrid IT and the Software Defined Data Center.Recently, the UEFI Forum and DMTF standards groups have collaborated to promote industry adoption of their various specifications. The UEFI Forum is currently acting as an external provider for DMTF’s Redfish standard. But what is the relationship between platform and management firmware? In this UEFI Forum hosted webinar, Samer El Haj Mahmoud (DMTF), Zach Bobroff (AMI) and Jason Spottswood (HPE) provide an overview of the Redfish standard, implementation challenges and how Redfish and UEFI firmware interact with each other in the greater firmware ecosystem.
