System validation by hardware root of trust (HRoT) device and system management mode (SMM)

A secure system comprising:

• a hardware root of trust (HRoT) device comprising at least one processor, the at least one processor of the HRoT device configured to authenticate custom boot codes, the custom boot codes comprising a security module, the custom boot codes configured to be loaded and executed on a host platform, the customer boot codes, when executed by a processor on the host platform, being configured to:
• install the security module to process a periodic System Management Interrupt (SMI);
• configure the periodic SMI for initiation;
• and
• configure at least one configuration register for validation in response to execution of the security module;
• such that, in response to initiation of the configured periodic SMI, the security module executes to validate the at least one configuration register using the HRoT device.

A computer-implemented method comprising:

• loading, by a hardware root of trust (HRoT) device, custom boot codes, the custom boot codes comprising a security module;
• authenticating, by the HRoT device, the custom boot codes;
• and
• providing the authenticated custom boot codes to a host platform such that, when executed by a processor of the host platform, the custom boot codes
• install the security module to execute in System Management Mode (SMM) to process a periodic System Management Interrupt (SMI);
• configure the periodic SMI for initiation;
• and
• configure at least one configuration register for validation using the HRoT device in response to execution of the security module.