Secure Boot and Measured Boot

Protect system integrity from boot to runtime.

Boot security prevents firmware and bootloader attacks.

Secure Boot

- UEFI feature
- Validates boot signatures
- Prevents unauthorized code
- Uses certificate chain

- Records boot measurements
- Stores in TPM PCRs
- Enables remote attestation
- Detects tampering

- UEFI firmware
- TPM 2.0
- Signed bootloaders
- Windows 11 / Linux support