Secure boot chain for live boot systems

A method for managing booting of an operating system, the method comprising:

• embedding application code instructions and a pre-loaded signed certificate in a UEFI controller;
• storing application code instructions for the operating system, pre-loaded signed certificates, and a plurality of application hash identifiers in a boot process controller,
• receiving at the boot process controller signed communications from the UEFI controller;
• and
• determining if the UEFI controller is authorized to functionally manage the operating system;
• wherein the UEFI controller functionally manages the operating system in response to a positive authorization;
• wherein the operating system comprises a boot loader program, kernel and an initial RAM file system, base OS image and configuration image files, and pre-signed certificates associated with each.

An apparatus for managing booting of an operating system, the apparatus comprising:

• a UEFI controller comprising embedded application code instructions and a pre-loaded signed certificate;
• a boot process controller comprising application code instructions for the operating system, pre-loaded signed certificates, and a plurality of application hash identifiers, and
• the boot process controller receives signed communications from the UEFI controller and determines if the UEFI controller is authorized to functionally manage the operating system;
• wherein the UEFI controller functionally manages the operating system in response to a positive authorization;
• wherein the operating system comprises a boot loader program, an initial RAM file system, kernel image, configuration image files, and pre-signed certificates associated with each.