Management of hardware passwords

摘要

In the context of computer systems, the generation of preboot passwords at a server instead of at a client. Preferably, preboot passwords generated at the server are distributed to the client, and a process is offered whereby a user can establish his/her own proxy, not known to the server, that can be used to release the stored passwords to the client hardware. Since the passwords are generated at the server, management of the passwords is greatly facilitated since they are generated at the site where they are stored. This also makes it easy to implement management features such as a group policy, since the password generation software will be able to make logical connections between users and hardware.

主权项

1. A method comprising:
providing a main memory in communication with a physical computing device; providing a vault memory in communication with the physical computing device, the vault memory being secure with respect to the main memory; receiving, at the physical computing device, one or more pre-boot passwords from one or more servers; storing the one or more pre-boot passwords at the vault memory, the one or more pre-boot passwords being generated at the one or more servers, wherein the one or more pre-boot passwords are revocable by the one or more servers; and responsive to user input received at the physical computing device, unlocking the vault memory to release the one or more pre-boot passwords.