Computer system with selectively available immutable boot block code

Abstract

A computer system contains selectively available boot block codes. A first boot block is of the conventional type and is stored in storage media such as flash ROM on a system planar with the processor of the computer system. A second boot block is located on a feature card and contains an immutable security code in compliance with the Trusted Computing Platform Alliance (TCPA) specification. The boot block on the feature card is enabled if the first boot block detects the presence of the feature card. The computer system can be readily modified as the computer system is reconfigured, while maintaining compliance with the TCPA specification. A switching mechanism controls which of the boot blocks is to be activated. The feature card is disabled in the event of a computer system reset to prevent access to the TCPA compliant code and function.

1 - 15 . (canceled)  
   
   
       16 . A method of loading an operating system for a computer system in compliance with a security code meeting TCPA standards, comprising the steps of: 
 verifying if the security compliance feature is activated; and    if so, loading the security compliant operating system.    
   
   
       17 . The method of  claim 16 , wherein the computer system also includes a conventional program for loading an operating system, and further including the step of loading the operating system with the conventional program if the security compliance feature is not enabled.  
   
   
       18 . The method of  claim 16 , wherein the computer system is susceptible of a reset operation and further including the step of inhibiting loading of the security compliant operating system in the event of a reset operation.  
   
   
       19 . A feature card for loading an operating system for a computer system in compliance with a security code meeting TCPA standards, comprising: 
 machine readable memory storage media on the feature card and containing a boot block for loading an operating system for the computer system; and    a security code in the machine readable memory storage media for measuring security compliance of the boot block when enabled.    
   
   
       20 . The feature card of  claim 19 , further including: 
 logic on the feature card responsive to a system reset of the computer system for inhibiting operation of the feature card if the boot block in the machine readable memory storage media is enabled.