SBoMs are becoming an important part of software security. That includes the security of firmware that follows the UEFI standard. US Government Executive Order 14028 and documents from the US Department of Commerce NTIA describe why SBoMs are important for security. The UEFI forum has created a SBoM team to develop guidance for the creation and delivery of SBoM data to the firmware ecosystem and end users. A part of this effort is to include SBoM metadata into platform firmware images. This blog contains a proposal for inclusion of such data in those firmware images. It is being posted here to generate discussions and feedback to the SBoM team as it develops its guidance and recommendations.
UEFI Blogs
Friday, April 2, 2021
This communication is for everyone in the ACPI/UEFI computing platform ecosystem: those who develop platforms and firmware using ACPI (Advanced Configuration and Power Interface), and those who provide hardware description tables for ACPI implementations. During the development of the ACPI Specification, Version 6.4, the specification working group noted that all ACPI tables in a platform must conform to the same specification version. The specification text is as follows:
Tuesday, September 22, 2020
Given the shift to virtual events this year, the UEFI Forum has been prioritizing themed educational webinars on our UEFI Forum BrightTALK channel. Since March, we have built an audience of over 1,000 firmware enthusiasts and hosted eleven webinars covering a range of webinar topics from security to member company implementations.
Tuesday, August 25, 2020
UEFI Forum members from Microsoft recently presented a webinar as part of the UEFI 2020 Virtual Plugfest series titled “Microsoft’s Continued Advancements in the UEFI Ecosystem.” The presentation covered open source tools and open source integration, explored their “Code First” model and much more.
Tuesday, July 28, 2020
Compute Express Link™ (CXL™) is a new, high-speed CPU-to-Device and CPU-to-Memory interconnect designed to accelerate next-generation data center performance. UEFI and ACPI specifications provide standard interfaces for discovering new system attributes and as such need to be extended for discovering, enumerating and configuring CXL devices and CXL-capable systems.
Tuesday, July 28, 2020
Don’t miss the next series of webinars from the UEFI 2020 Virtual Plugfest: Security Week. The upcoming presentations will feature discussions on secure firmware and how memory safety issues lead to vulnerabilities in firmware. If you would like to register to attend these live webinars or view previous webinars, visit UEFI Forum BrightTALK channel. Read more about the Security focused webinars:
Thursday, May 28, 2020
After the success of our Industry Ecosystem webinars as part of the UEFI 2020 Virtual Plugfest, we are pleased to introduce the next round of webinars focused on a variety of timely Open Source topics. Learn more about the upcoming webinars hosted on the UEFI Forum BrightTALK channel:
Thursday, April 23, 2020
As you are likely aware, travel restrictions and health concerns resulting from COVID-19 meant converting the annual UEFI Spring Plugfest into an online, virtual event.
Tuesday, March 31, 2020
As you are likely aware, the Spring 2020 UEFI Plugfest has been canceled due to concerns surrounding the transmission of COVID-19 (“coronavirus”).
Tuesday, February 25, 2020
To understand how system firmware is generated for modern computer systems, it is important to first understand the ecosystem and commonly used terminology. This post helps readers gain a better understanding of the development process, the industry’s “unique language” and how it applies to UEFI firmware.