Secure BIOS access and password rotation

摘要

A device may periodically update a BIOS password on a client device. In some implementations, the device may determine a particular password generation algorithm; determine password generation seed values; and generate a first password and one or more second passwords based on the particular password generation algorithm and the password generation seed values. The first password may be a password that should be set for the BIOS. The one or more second passwords may be possible current passwords currently set. The device may individually output the one or more second passwords to the client device to cause the client device to update a password of the BIOS to update to the first password; receive an indication that the BIOS password has been updated to the first password; and output the indication that the BIOS password has been updated to the first password.

主权项

1. A method comprising:
determining a particular password generation algorithm, of a plurality of password generation algorithms, based on information regarding a client device; determining password generation seed values that include milestone dates, identified based on a security protocol that indicates a frequency at which BIOS passwords should be changed; generating a first password and one or more second passwords based on the particular password generation algorithm and the password generation seed values,
the first password corresponding to a password that should be set for a BIOS associated with the client device,the one or more second passwords being possible current passwords currently set for the BIOS; and changing the BIOS password, at the client device, to be the first password, the changing of the BIOS password being based on using the one or more second passwords.