SlideShare a Scribd company logo
1 of 28
Download to read offline
Improving the boot
experience
Service & App
       POST               OS Initialization
                                               Initialization


              Service &
POST
               App Init
Post with highest supported                          Seamless single graphics
native resolution                                    transition from firmware to
                    Clean, high-resolution branding  native OS driver
                    elements persist through OS boot



                  OEM                   OEM
                  Logo                  Logo




                                                    Device
                  POST            Hiber Resume               Explorer Init.
                                                     Init.
                            2s                 4s            6s          7s
Enhancing security
POST                                                              Windows
                                                                      Logon


                                                                     Early Launch
  Firmware       BootMgr          Boot Critical   NTOS Kernel        Anti-malware
     OK?           OK?            Drivers OK?        OK?               (ELAM)




                                                    Last Resort
                            Secure Boot
   UEFI
                           Remediation /            Factory Reset
 Recovery?
                             Recovery
                                                    Enterprise PXE

                                                    External media

                                                   Contact Support
Firmware Last
    Resort      Reboot
Design guidance
Windows OS
            BIOS UEFI Win32/NT APIs
 UEFI OS Loader OS Loader                          ACPI Driver




       UEFI Runtime Services
  Compatibility Support Module (CSM)
                                         ACPI                     ACPI
              Legacy BIOS                          ACPI BIOS
                                       Registers                 Tables
     Platform Specific UEFI Firmware
Firmware


                              System Hardware
Interface                             Legacy BIOS                                       UEFI
   Architecture                         x86 / X64 only                                  Agnostic
   Mode                              16 bit (real mode)                                 32/64 bit
   Boot Partition                    MBR (2.2 TB limit)                          GPT (9.4 ZB* limit)
   Runtime Services                              No                                         Yes
   Driver model                                  No                                         Yes
   POST Graphics                               VGA                        Graphical Output Protocol
                                                                                    (GOP)

* A zettabyte is equal to 1B terabytes. The total amount of global data was expected to pass 1.2 ZB sometime during 2010.
Recap
http://forums.dev.windows.com


http://bldw.in/SessionFeedback
http://www.uefi.org/

http://www.trustedcomputinggroup.org/
            http://www.tianocore.sourceforge.net
                    http://msdn.microsoft.com/en-
us/windows/hardware/gg463149
        http://msdn.microsoft.com/

              http://www.intel.com/intelpress/sum_efi.htm
BACKUP
38.2% from top to middle of logo




                                          Max 40%




     Max 40%




This space reserved for OS
Delivering a secure and fast boot experience with uefi

More Related Content

What's hot

Modern Bootkit Trends: Bypassing Kernel-Mode Signing Policy
Modern Bootkit Trends: Bypassing Kernel-Mode Signing PolicyModern Bootkit Trends: Bypassing Kernel-Mode Signing Policy
Modern Bootkit Trends: Bypassing Kernel-Mode Signing Policy
Alex Matrosov
 
Distro Recipes 2013: Secure Boot and Linux: several issues, one solution
Distro Recipes 2013: Secure Boot and Linux: several issues, one solutionDistro Recipes 2013: Secure Boot and Linux: several issues, one solution
Distro Recipes 2013: Secure Boot and Linux: several issues, one solution
Anne Nicolas
 

What's hot (20)

Implementing a UEFI BIOS into an Embedded System
Implementing a UEFI BIOS into an Embedded SystemImplementing a UEFI BIOS into an Embedded System
Implementing a UEFI BIOS into an Embedded System
 
Modern Bootkit Trends: Bypassing Kernel-Mode Signing Policy
Modern Bootkit Trends: Bypassing Kernel-Mode Signing PolicyModern Bootkit Trends: Bypassing Kernel-Mode Signing Policy
Modern Bootkit Trends: Bypassing Kernel-Mode Signing Policy
 
UEFI Firmware Rootkits: Myths and Reality
UEFI Firmware Rootkits: Myths and RealityUEFI Firmware Rootkits: Myths and Reality
UEFI Firmware Rootkits: Myths and Reality
 
BIOS - Basic Input Output System | Tentang BIOS Komputer dalam Bahasa Inggris
BIOS - Basic Input Output System | Tentang BIOS Komputer dalam Bahasa InggrisBIOS - Basic Input Output System | Tentang BIOS Komputer dalam Bahasa Inggris
BIOS - Basic Input Output System | Tentang BIOS Komputer dalam Bahasa Inggris
 
Learning AOSP - Android Linux Device Driver
Learning AOSP - Android Linux Device DriverLearning AOSP - Android Linux Device Driver
Learning AOSP - Android Linux Device Driver
 
Intro bios
Intro biosIntro bios
Intro bios
 
BIOS basic input output system
BIOS basic input output systemBIOS basic input output system
BIOS basic input output system
 
BIOS/UEFI
BIOS/UEFIBIOS/UEFI
BIOS/UEFI
 
BIOS AND OS
BIOS AND OSBIOS AND OS
BIOS AND OS
 
Bios
BiosBios
Bios
 
Grub
GrubGrub
Grub
 
Cân tiểu ly
Cân tiểu lyCân tiểu ly
Cân tiểu ly
 
Learning AOSP - Android Booting Process
Learning AOSP - Android Booting ProcessLearning AOSP - Android Booting Process
Learning AOSP - Android Booting Process
 
Distro Recipes 2013: Secure Boot and Linux: several issues, one solution
Distro Recipes 2013: Secure Boot and Linux: several issues, one solutionDistro Recipes 2013: Secure Boot and Linux: several issues, one solution
Distro Recipes 2013: Secure Boot and Linux: several issues, one solution
 
Fast Boot Times with InsydeH2O
Fast Boot Times with InsydeH2OFast Boot Times with InsydeH2O
Fast Boot Times with InsydeH2O
 
Promocion Toshiba satellite
Promocion Toshiba satellitePromocion Toshiba satellite
Promocion Toshiba satellite
 
Secure boot general
Secure boot generalSecure boot general
Secure boot general
 
Bios
BiosBios
Bios
 
Android Booting Sequence
Android Booting SequenceAndroid Booting Sequence
Android Booting Sequence
 
BIOS
BIOSBIOS
BIOS
 

Viewers also liked

Natalie jane ppt
Natalie jane pptNatalie jane ppt
Natalie jane ppt
nolandna
 
All about me
All about meAll about me
All about me
lanchop
 
Anuario 3ºC
Anuario 3ºCAnuario 3ºC
Anuario 3ºC
fernanda
 
WebFWD at UUM #MozillaCampusTour2011
WebFWD at UUM #MozillaCampusTour2011WebFWD at UUM #MozillaCampusTour2011
WebFWD at UUM #MozillaCampusTour2011
LightYoruichi
 
Treat Animals Well
Treat Animals WellTreat Animals Well
Treat Animals Well
kavitamenon1
 

Viewers also liked (20)

WP7 - Dissemination
WP7 - DisseminationWP7 - Dissemination
WP7 - Dissemination
 
Face IT2U marcom11 seminar presentation
Face IT2U marcom11 seminar presentationFace IT2U marcom11 seminar presentation
Face IT2U marcom11 seminar presentation
 
P pfor benspeaks
P pfor benspeaksP pfor benspeaks
P pfor benspeaks
 
Natalie jane ppt
Natalie jane pptNatalie jane ppt
Natalie jane ppt
 
All about me
All about meAll about me
All about me
 
Anuario 3ºC
Anuario 3ºCAnuario 3ºC
Anuario 3ºC
 
Singapore f1 qualifying & practice
Singapore f1 qualifying & practiceSingapore f1 qualifying & practice
Singapore f1 qualifying & practice
 
Droits taxes-produits-energie-juillet 2011 dgddi
Droits taxes-produits-energie-juillet 2011 dgddiDroits taxes-produits-energie-juillet 2011 dgddi
Droits taxes-produits-energie-juillet 2011 dgddi
 
E content
E contentE content
E content
 
IFS/Lidské zdroje
IFS/Lidské zdrojeIFS/Lidské zdroje
IFS/Lidské zdroje
 
Trust in Distributed Systems
Trust in Distributed SystemsTrust in Distributed Systems
Trust in Distributed Systems
 
Esperanzas
EsperanzasEsperanzas
Esperanzas
 
SPD0315_USVI
SPD0315_USVISPD0315_USVI
SPD0315_USVI
 
Programa de prácticas en empresas internacionales para la Facultad de Ciencia...
Programa de prácticas en empresas internacionales para la Facultad de Ciencia...Programa de prácticas en empresas internacionales para la Facultad de Ciencia...
Programa de prácticas en empresas internacionales para la Facultad de Ciencia...
 
WebFWD at UUM #MozillaCampusTour2011
WebFWD at UUM #MozillaCampusTour2011WebFWD at UUM #MozillaCampusTour2011
WebFWD at UUM #MozillaCampusTour2011
 
Hoe zorg ik dat Recruiters mij vinden op LinkedIn?
Hoe zorg ik dat Recruiters mij vinden op LinkedIn?Hoe zorg ik dat Recruiters mij vinden op LinkedIn?
Hoe zorg ik dat Recruiters mij vinden op LinkedIn?
 
CentOS 6.7 System Config Network Tool
CentOS 6.7 System Config Network ToolCentOS 6.7 System Config Network Tool
CentOS 6.7 System Config Network Tool
 
origama
origamaorigama
origama
 
Course 1: Create and Prepare CentOS 7 VM Template
Course 1: Create and Prepare CentOS 7 VM TemplateCourse 1: Create and Prepare CentOS 7 VM Template
Course 1: Create and Prepare CentOS 7 VM Template
 
Treat Animals Well
Treat Animals WellTreat Animals Well
Treat Animals Well
 

Similar to Delivering a secure and fast boot experience with uefi

Bootkits: past, present & future
Bootkits: past, present & futureBootkits: past, present & future
Bootkits: past, present & future
Alex Matrosov
 
13.30 hr Hebinck
13.30 hr Hebinck13.30 hr Hebinck
13.30 hr Hebinck
Themadagen
 
my Windows 7 info
my Windows 7 infomy Windows 7 info
my Windows 7 info
isky guard
 
P4i45 gv r5
P4i45 gv r5P4i45 gv r5
P4i45 gv r5
rodanteg
 
How To Connect Hardware To Device Emulatorx
How To Connect Hardware To Device EmulatorxHow To Connect Hardware To Device Emulatorx
How To Connect Hardware To Device Emulatorx
Zebra Chen
 
DefCon 2012 - Hardware Backdooring (Slides)
DefCon 2012 - Hardware Backdooring (Slides)DefCon 2012 - Hardware Backdooring (Slides)
DefCon 2012 - Hardware Backdooring (Slides)
Michael Smith
 
Hp Pavilion Dv7 1285dx
Hp Pavilion Dv7 1285dxHp Pavilion Dv7 1285dx
Hp Pavilion Dv7 1285dx
guest4c26a67
 

Similar to Delivering a secure and fast boot experience with uefi (20)

Windows 8 Client Part 1 "The OS internals for IT-Pro's"
Windows 8 Client Part 1 "The OS internals for IT-Pro's"Windows 8 Client Part 1 "The OS internals for IT-Pro's"
Windows 8 Client Part 1 "The OS internals for IT-Pro's"
 
Bootkits: past, present & future
Bootkits: past, present & futureBootkits: past, present & future
Bootkits: past, present & future
 
BIOS, Linux and Firmware Test Suite in-between
BIOS, Linux and  Firmware Test Suite in-betweenBIOS, Linux and  Firmware Test Suite in-between
BIOS, Linux and Firmware Test Suite in-between
 
Bootkits: Past, Present & Future - Virus Bulletin
Bootkits: Past, Present & Future - Virus BulletinBootkits: Past, Present & Future - Virus Bulletin
Bootkits: Past, Present & Future - Virus Bulletin
 
13.30 hr Hebinck
13.30 hr Hebinck13.30 hr Hebinck
13.30 hr Hebinck
 
bios.docx
bios.docxbios.docx
bios.docx
 
05 - BIOS.ppt
05 - BIOS.ppt05 - BIOS.ppt
05 - BIOS.ppt
 
Sorage & pc booting ppt prabu
Sorage & pc booting ppt prabuSorage & pc booting ppt prabu
Sorage & pc booting ppt prabu
 
my Windows 7 info
my Windows 7 infomy Windows 7 info
my Windows 7 info
 
[Hackito2012] Hardware backdooring is practical
[Hackito2012] Hardware backdooring is practical[Hackito2012] Hardware backdooring is practical
[Hackito2012] Hardware backdooring is practical
 
Jailbreaking iOS
Jailbreaking iOSJailbreaking iOS
Jailbreaking iOS
 
P4i45 gv r5
P4i45 gv r5P4i45 gv r5
P4i45 gv r5
 
How To Connect Hardware To Device Emulatorx
How To Connect Hardware To Device EmulatorxHow To Connect Hardware To Device Emulatorx
How To Connect Hardware To Device Emulatorx
 
BIOS
BIOSBIOS
BIOS
 
Grub2 Booting Process
Grub2 Booting ProcessGrub2 Booting Process
Grub2 Booting Process
 
Slimline Open Firmware
Slimline Open FirmwareSlimline Open Firmware
Slimline Open Firmware
 
DefCon 2012 - Hardware Backdooring (Slides)
DefCon 2012 - Hardware Backdooring (Slides)DefCon 2012 - Hardware Backdooring (Slides)
DefCon 2012 - Hardware Backdooring (Slides)
 
1.2 bios and cmos
1.2  bios and cmos1.2  bios and cmos
1.2 bios and cmos
 
Windows7
Windows7Windows7
Windows7
 
Hp Pavilion Dv7 1285dx
Hp Pavilion Dv7 1285dxHp Pavilion Dv7 1285dx
Hp Pavilion Dv7 1285dx
 

More from Norman Mayes (7)

System Center Endpoint Protection 2012 R2
System Center Endpoint Protection 2012 R2System Center Endpoint Protection 2012 R2
System Center Endpoint Protection 2012 R2
 
Nozzle: A Defense Against Heap-Spraying
Nozzle:  A Defense Against Heap-SprayingNozzle:  A Defense Against Heap-Spraying
Nozzle: A Defense Against Heap-Spraying
 
NOZZLE: A Defense Against Heap-spraying Code Injection Attacks
NOZZLE: A Defense Against Heap-spraying Code Injection AttacksNOZZLE: A Defense Against Heap-spraying Code Injection Attacks
NOZZLE: A Defense Against Heap-spraying Code Injection Attacks
 
System Center 2012 Virtual Machine Manager
System Center 2012 Virtual Machine ManagerSystem Center 2012 Virtual Machine Manager
System Center 2012 Virtual Machine Manager
 
System Center 2012 - IT GRC
System Center 2012 - IT GRCSystem Center 2012 - IT GRC
System Center 2012 - IT GRC
 
2013 State of the CIO Exec Summary
2013 State of the CIO Exec Summary2013 State of the CIO Exec Summary
2013 State of the CIO Exec Summary
 
Goldman
GoldmanGoldman
Goldman
 

Recently uploaded

Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
Joaquim Jorge
 

Recently uploaded (20)

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot TakeoffStrategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
Boost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityBoost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivity
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
Advantages of Hiring UIUX Design Service Providers for Your Business
Advantages of Hiring UIUX Design Service Providers for Your BusinessAdvantages of Hiring UIUX Design Service Providers for Your Business
Advantages of Hiring UIUX Design Service Providers for Your Business
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
AWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of Terraform
 
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
 
Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024
 
Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
 
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, AdobeApidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
 
[2024]Digital Global Overview Report 2024 Meltwater.pdf
[2024]Digital Global Overview Report 2024 Meltwater.pdf[2024]Digital Global Overview Report 2024 Meltwater.pdf
[2024]Digital Global Overview Report 2024 Meltwater.pdf
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a Fresher
 
Automating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps ScriptAutomating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps Script
 
GenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdfGenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdf
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?
 

Delivering a secure and fast boot experience with uefi

  • 1.
  • 2.
  • 3.
  • 5.
  • 6.
  • 7. Service & App POST OS Initialization Initialization Service & POST App Init
  • 8. Post with highest supported Seamless single graphics native resolution transition from firmware to Clean, high-resolution branding native OS driver elements persist through OS boot OEM OEM Logo Logo Device POST Hiber Resume Explorer Init. Init. 2s 4s 6s 7s
  • 9.
  • 11.
  • 12. POST Windows Logon Early Launch Firmware BootMgr Boot Critical NTOS Kernel Anti-malware OK? OK? Drivers OK? OK? (ELAM) Last Resort Secure Boot UEFI Remediation / Factory Reset Recovery? Recovery Enterprise PXE External media Contact Support Firmware Last Resort Reboot
  • 13.
  • 15. Windows OS BIOS UEFI Win32/NT APIs UEFI OS Loader OS Loader ACPI Driver UEFI Runtime Services Compatibility Support Module (CSM) ACPI ACPI Legacy BIOS ACPI BIOS Registers Tables Platform Specific UEFI Firmware Firmware System Hardware
  • 16. Interface Legacy BIOS UEFI Architecture x86 / X64 only Agnostic Mode 16 bit (real mode) 32/64 bit Boot Partition MBR (2.2 TB limit) GPT (9.4 ZB* limit) Runtime Services No Yes Driver model No Yes POST Graphics VGA Graphical Output Protocol (GOP) * A zettabyte is equal to 1B terabytes. The total amount of global data was expected to pass 1.2 ZB sometime during 2010.
  • 17.
  • 18. Recap
  • 19.
  • 21.
  • 22. http://www.uefi.org/ http://www.trustedcomputinggroup.org/ http://www.tianocore.sourceforge.net http://msdn.microsoft.com/en- us/windows/hardware/gg463149 http://msdn.microsoft.com/ http://www.intel.com/intelpress/sum_efi.htm
  • 24.
  • 25.
  • 26.
  • 27. 38.2% from top to middle of logo Max 40% Max 40% This space reserved for OS