Manualshelf

White Papers

ManualsBrandsDell ManualsConverged InfrastructureBIOS Verification
13141516171819202122
Registry
The Trusted Device agent's results are written to the registry each time the BIOS Verification agent is run. All BIOS Verification, Image
Capture, and BIOS Events & Indicators of Attack registry keys are located at HKLM\Software\Dell\TrustedDevice.
Off-host Verification
• This entry stores the pass/fail status of off-host verification in JSON format.
HKLM\Software\Dell\BiosVerification
Result.json
"biosVerification":"True"=Pass
"biosVerification":"False"=Fail
Image Capture
• This entry stores the location of the image store and is updated when the -updateimagestore parameter is used.
HKLM\Software\Dell\TrustedDevice
"ImagePathStore"=string
• Determine if an image was present on the last Image Capture run. This value will not exist if Image Capture has not run.
HKLM\Software\Dell\TrustedDevice
"ImagePresentOnLastRun"=DWORD
DWORD=1 - Image was present on last run.
DWORD=0 - Image was not present on last run.
• Image store path in which the last image was copied. This value will not exist if no images are captured.
"LastImagePath"=string
• Timestamp of the last copied image.
"LastCopyTimeStamp"=string
• This private key verifies the images in the store.
"PrivateKeyBlob"=string
Note: End users should not modify this entry as it will prevent the product from functioning properly.
• A public key used to verify the images in the store.
"PublicKeyBlob"=string
Note: End users should not modify this entry as it will prevent the product from functioning properly.
BIOS Attributes Polling Interval
• This entry configures the time period in seconds between BIOS attribute sweeps.
HKLM\SOFTWARE\Dell\TrustedDevice\
DWORD=SecondsBetweenAttributeSweeps
Minimum value in seconds = 3600 (1 hour)
Maximum value = 172800 (48 hours)
Default = every 12 hours
Value (in decimal) = 3600 - sweeps occur every one hour
Value (in decimal) = 172800 - sweeps occur every 48 hours
• This entry changes the delay in milliseconds between each individual BIOS attribute retrieval.
HKLM\SOFTWARE\Dell\TrustedDevice\
DWORD=MSBetweenAttributeReads
Minimum value in milliseconds = 500
Maximum value in milliseconds = 2000
Default = every 500 ms
Value (in decimal) = 500 - reads a different BIOS attribute every 500 ms
Results, Troubleshooting, and Remediation
21