Global platform health management

摘要

The use of one or more device health values to indicate the health status of a computing device may enable operating system developers to directly manage the security configuration of the computing device. The generation of a device health value involves initializing hardware components of a computing device and loading the operating system according to configuration settings during boot up of the computing device. The device health value is then generated based on a state of the hardware component and/or a state of a software stack that includes the operating system at boot up. The device health value may be compared to a reference health value to determine whether the computing device is in a secured state.

主权项

1. One or more computer storage devices storing computer-executable instructions that upon execution cause one or more processors to perform acts comprising:
initializing one or more hardware components in a hardware platform of a reference device according to hardware configuration settings that are approved by a developer of an operating system (OS); loading the OS on the reference device according to one or more OS configuration settings that are approved by the developer of the OS; and generating, based at least in part on one or more hardware configuration values and one or more OS configuration values, a reference health value at the initializing of the hardware platform and the loading of the OS of the reference device, the reference health value representing that the reference device has a secured state.