Platform root-of-trust system

A System Control Processor (SCP) subsystem, comprising:

• a System Control Processor (SCP) processing system;
• and
• an SCP memory system that is coupled to the SCP processing system and that includes instructions that, when executed by the SCP processing system, cause the SCP processing system to provide an SCP engine that is configured to:
• begin, in response to an initialization instruction, initialization operations for the SCP subsystem prior to the beginning of initialization operations for a central processing subsystem that is coupled to the SPC subsystem, a BIOS subsystem that is coupled to the SCP subsystem, and an I/O device that is coupled to the SCP subsystem;
• validate, as part of the initialization operations for the SCP subsystem, SCP subsystem initialization information to provide validated SCP subsystem initialization information;
• complete, using the validated SCP subsystem initialization information, the initialization operations for the SCP subsystem;
• validate, subsequent to completing the initialization operations for the SCP subsystem, BIOS subsystem initialization information to provide validated BIOS subsystem initialization information that is configured for use by the BIOS subsystem to perform initialization operations for the BIOS subsystem;
• and
• validate, subsequent to completing the initialization operations for the SCP subsystem, I/O device initialization information to provide validated I/O device initialization information that is configured for use by the I/O device to perform initialization operations for the I/O device.

A method for providing a platform root-of-trust, comprising:

• beginning, by a System Control Processor (SCP) subsystem in response to an initialization instruction, initialization operations for the SCP subsystem prior to the beginning of initialization operations for a central processing subsystem that is coupled to the SCP subsystem, a BIOS subsystem that is coupled to the SCP subsystem, and an I/O device that is coupled to the SCP subsystem;
• validating, by the SCP subsystem as part of the initialization operations for the SCP subsystem, SCP subsystem initialization information to provide validated SCP subsystem initialization information;
• completing, by the SCP subsystem using the validated SCP subsystem initialization information, the initialization operations for the SCP subsystem;
• validating, by the SCP subsystem subsequent to completing the initialization operations for the SCP subsystem, BIOS subsystem initialization information to provide validated BIOS subsystem initialization information that is configured for use by the BIOS subsystem to perform initialization operations for the BIOS subsystem;
• and
• validating, by the SCP subsystem subsequent to completing the initialization operations for the SCP subsystem, I/O device initialization information to provide validated I/O device initialization information that are configured for use by the I/O device to perform initialization operations for the I/O device.