Technologies for securely binding a platform manifest to a platform

A method for platform manifest management, the method comprising:

• receiving, by a security engine of a computing device, a manifest hash, wherein the manifest hash comprises a hash of a platform manifest, and wherein the platform manifest is indicative of a hardware configuration of the computing device;
• modifying, by the computing device, a bit of a field-programmable fuse of the computing device in response to receiving the manifest hash;
• storing, by the security engine, the manifest hash and a counter value in a non-volatile storage of the computing device in response to modifying the bit to generate a stored manifest hash and a stored counter value, wherein the counter value is indicative of a value of the field-programmable fuse;
• generating, by the security engine, a message authentication code over the stored manifest hash and the stored counter value in response to modifying the bit;
• and
• storing, by the security engine, the message authentication code in the non-volatile storage.

One or more computer-readable storage media comprising a plurality of instructions that in response to being executed cause a computing device to:

• receive, by a security engine of the computing device, a manifest hash, wherein the manifest hash comprises a hash of a platform manifest, and wherein the platform manifest is indicative of a hardware configuration of the computing device;
• modify a bit of a field-programmable fuse of the computing device in response to receiving the manifest hash;
• store, by the security engine, the manifest hash and a counter value in a non-volatile storage of the computing device in response to modifying the bit to generate a stored manifest hash and a stored counter value, wherein the counter value is indicative of a value of the field-programmable fuse;
• generate, by the security engine, a message authentication code over the stored manifest hash and the stored counter value in response to modifying the bit;
• and
• store, by the security engine, the message authentication code in the non-volatile storage.