ENSURING THAT A SOFTWARE UPDATE MAY BE INSTALLED OR RUN ONLY ON A SPECIFIC DEVICE OR RUN ONLY ON A SPECIFIC DEVICE OR CLASS OF DEVICES

摘要

Described is a system and method in which a system and method in which a device manufacturer or software image provider controls which devices are allowed to install or to run a software image. An image keying mechanism uses UUID and package data associated with the device or class of devices to key an image. Because the UUID is used in the key, an installer verifier and/or boot-time verifier can ensure that the device is authorized to install and/or run the image. Any package, including existing device packages or the package for which installation is requested can demand that keying be enforced. An installer mechanism checks whether the device is allowed to install the image. A boot-time enforcement mechanism prevents an improperly installed image from operating by halting the boot process if a determined key is invalid or missing.