Method and Apparatus for Secure System Boot

A computer system, comprising:

• a main processor;
• an auxiliary processor;
• a platform controller hub coupled to the main processor and the auxiliary processor;
• and
• memory having stored therein an identifier that is unique to the computer system, and wherein the auxiliary processor is configured to:
• during a boot process, perform a verification of boot code for the main processor, wherein the verification includes verifying an association between the boot code and the stored identifier;
• based on the verification:
• cause the main processor to be released from a reset state;
• and
• provide an indication that the boot code has been verified to the platform controller hub, wherein the platform controller hub is configured to provide, responsive to the indication, the boot code to be provided to the main processor;
• and
• wherein the main processor is configured to execute the provided boot code to continue the boot process.

A method, comprising:

• beginning performance of a boot procedure in a computer system responsive to an auxiliary processor receiving power;
• verifying, by the auxiliary processor, boot code for a main processor of the computer system, wherein verifying the boot code includes the auxiliary processor verifying that the boot code is associated with a system identifier unique to the computer system;
• based on the verifying:
• releasing the main processor from a reset state;
• and
• the auxiliary processor providing, to a platform controller hub, an indication that the boot code has been verified;
• and
• in response to the indication, the platform controller hub transferring the boot code to the main processor for execution by the main processor.