Secure application bring-up with hash creation during secure download apparatus and method

A method, comprising:

• causing firmware executed by a processor to verify a bootloader;
• in response to verifying the bootloader, causing the bootloader to be executed to verify a kernel;
• in response to verifying the kernel, causing the kernel to be executed to verify a trust agent;
• in response to verifying the trust agent, causing the trust agent to process an application list to identify one or more files that are part of an application and to generate a hash for all of the one or more files combined or for each of the one or more files individually;
• comparing the hash for all of the one or more files combined or for each of the one or more files individually with a hash included in an application manifest file stored in a secure storage;
• and
• in response to confirming a hash match between the hash for all of the one or more files combined or for each of the one or more files individually and the hash included in the application manifest file, causing the one or more files that are part of the application to be executed.

A non-transitory computer readable medium having instructions stored thereon that, when executed by a processor, cause an apparatus to:

• cause firmware executed by a processor to verify a bootloader;
• in response to verifying the bootloader, cause the bootloader to be executed to verify a kernel;
• in response to verifying the kernel, cause the kernel to be executed to verify a trust agent;
• in response to verifying the trust agent, cause the trust agent to process an application list to identify one or more files that are part of an application and to generate a hash for all of the one or more files combined or for each of the one or more files individually;
• compare the hash for all of the one or more files combined or for each of the one or more files individually with a hash included in an application manifest file stored in a secure storage;
• and
• in response to confirming a hash match between the hash for all of the one or more files combined or for each of the one or more files individually and the hash included in the application manifest file, cause the one or more files that are part of the application to be executed.