A computing device, comprising: at least one processor; and memory including instructions that, when executed by the at least one processor, cause the computing device to implement: a hypervisor that manages one or more virtual machines and having access to a first portion of memory; and a privileged service having access to at least a second portion of memory that is inaccessible to the hypervisor, the privileged service configured for suspending the hypervisor and running in system management mode, the privileged service operable to: store a key on the computing device; receive a request to use the key from at least one of: the hypervisor or the one or more virtual machines; and measure one or more values associated with the hypervisor; determine that the hypervisor is unaltered based at least in part on the one or more values associated with the hypervisor; and generate a response to the request after determining that the hypervisor is unaltered, the response based at least in part on the key stored on the computing device. at least one processor; and memory including instructions that, when executed by the at least one processor, cause the computing device to implement: a hypervisor that manages one or more virtual machines and having access to a first portion of memory; and a privileged service having access to at least a second portion of memory that is inaccessible to the hypervisor, the privileged service configured for suspending the hypervisor and running in system management mode, the privileged service operable to: store a key on the computing device; receive a request to use the key from at least one of: the hypervisor or the one or more virtual machines; and measure one or more values associated with the hypervisor; determine that the hypervisor is unaltered based at least in part on the one or more values associated with the hypervisor; and generate a response to the request after determining that the hypervisor is unaltered, the response based at least in part on the key stored on the computing device. a hypervisor that manages one or more virtual machines and having access to a first portion of memory; and a privileged service having access to at least a second portion of memory that is inaccessible to the hypervisor, the privileged service configured for suspending the hypervisor and running in system management mode, the privileged service operable to: store a key on the computing device; receive a request to use the key from at least one of: the hypervisor or the one or more virtual machines; and measure one or more values associated with the hypervisor; determine that the hypervisor is unaltered based at least in part on the one or more values associated with the hypervisor; and generate a response to the request after determining that the hypervisor is unaltered, the response based at least in part on the key stored on the computing device. store a key on the computing device; receive a request to use the key from at least one of: the hypervisor or the one or more virtual machines; and measure one or more values associated with the hypervisor; determine that the hypervisor is unaltered based at least in part on the one or more values associated with the hypervisor; and generate a response to the request after determining that the hypervisor is unaltered, the response based at least in part on the key stored on the computing device.