Secure and measured boot.

Only signed firmware runs, and each boot stage is measured for attestation.

Standards

  • NIST SP 800-193 (platform firmware resiliency)
  • UEFI Specification (secure boot)

PKI, secure boot and updates