Intel® Pentium® Silver and Intel® Celeron® Processors Datasheet, Volume 1
A newer version of this document is available. Customers should click here to go to the newest version.
Boot Guard Technology
Boot Guard technology is a part of boot integrity protection technology. Boot Guard can help protect the platform boot integrity by preventing execution of unauthorized boot blocks. With Boot Guard, platform manufacturers can create boot policies such that invocation of an unauthorized (or untrusted) boot block will trigger the platform protection as per the manufacturer's defined policy.
With verification based in the hardware, Boot Guard extends the trust boundary of the platform boot process down to the hardware level.
Boot Guard accomplishes this by:
- Providing of hardware-based Static Root of Trust for Measurement (S-RTM) and the Root of Trust for Verification (RTV) using Intel architectural components.
- Providing of architectural definition for platform manufacturer Boot Policy.
- Enforcing of manufacture provided Boot Policy using Intel architectural components.
Benefits of this protection is that Boot Guard can help maintain platform integrity by preventing re-purposing of the manufacturer’s hardware to run an unauthorized software stack.