Insyde® Software Enhances BIOS Development Tools Adding Support for SBOM - Software Bill of Materials
New Industry Standards Support Helps Improve Supply Chain Security
TAIPEI, TAIWAN – May 31, 2023 – Insyde® Software, a leading provider of UEFI BIOS and OpenBMC Firmware, today announced that H2OIDE™ now offers support for SPDX (Software Package Data Exchange) and SWID (Software Identification) software asset management standards for SBOM (Software Bill of Materials) creation for InsydeH2O® UEFI BIOS.
A Software Bill of Materials plays a crucial role in the firmware supply chain by providing transparency of all software components within the firmware, including the origin and detailed inventory of the software contents, their versions and more. This information can be quickly leveraged by vendors, suppliers, and customers to enable faster reaction during security incident response, leading to more efficient coordination and more accurate targeted remediation of affected components. Customers can use this tool to respond to U.S. Executive Order 14028 for a more secure supply chain.
H2OIDE is a BIOS development tool that can help dramatically reduce customization effort and development time for new computer systems. With this new support for SBOM, H2OIDE enhances a developer’s ability to create SPDX SBOMs for BIOS source code and generate SWID SBOMs for BIOS images. These SBOMs can provide easier management of licenses, tracking of software versions, monitoring of CVE vulnerabilities and more.
“Our customers appreciate how much easier it is to create SPDX and SWID SBOMs with H2OIDE,” said Aven Chuang, President of Insyde Software. “This announcement demonstrates our on-going commitment to software security and software integrity and will help build a more secure and resilient firmware supply chain,” added Chuang.
Insyde Software is meeting its customers and partners this week on the 20th floor of The Place Taipei Hotel, in Taipei, Taiwan, from May 30th through June 2nd, 2023. If you plan to attend, please contact your Insyde Account Manager to arrange an appointment.
About Insyde Software
Insyde Software (www.insyde.com) is a leading worldwide provider of UEFI firmware, systems management solutions and custom engineering services for companies in the mobile, server, desktop, and IoT (Internet-of-Things) computing industries. The company is publicly held (6231.TWO) and headquartered in Taipei, Taiwan with U.S. headquarters in Westborough, MA. The company’s customers include the world’s leading computing, communications and storage device designers and manufacturers.
Insyde is a registered trademark and H2OIDE is a trademark of Insyde Software in the United States and other countries. Other names and brands may be claimed as the property of others.