Enhanced secure boot

A method of securely booting a computing system, comprising:

• provisioning a set of field programmable fuses with an original equipment manufacturer key;
• executing first encrypted firmware in a first initialization phase upon restart of a processing element of the computing system, the executing of the first encrypted firmware including:
• creating handoff data for use by a second initialization phase;
• encrypting the handoff data with an original equipment manufacturer key provisioned in the set of field programmable fuses;
• decrypting second encrypted firmware using the original equipment manufacturer key;
• and
• passing the encrypted handoff data to the second encrypted firmware to perform the second initialization phase of the processing element.

A machine readable storage device or storage disk comprising firmware instructions to provide an enhanced secure boot of a processing element of a computing system, the firmware instructions, when executed, to cause the processing element to at least:

• execute first encrypted firmware to perform a first initialization phase of the processing element in a protected enclave upon restart of the processing element, the first encrypted firmware, when executed, to cause the processing element to:
• create handoff data for use by a second initialization phase;
• encrypt the handoff data with an original equipment manufacturer key provisioned in a set of field programmable fuses;
• decrypt second encrypted firmware using the original equipment manufacturer key;
• and
• pass the encrypted handoff data to the second encrypted firmware to perform the second initialization phase of the processing element.