A device (100, 100'), comprising: a memory module including at least platform boot firmware (102, 102'), the platform boot firmware (102, 102') comprising a pre-verifier and a hash table that are part of a UEFI (Unified Extensible Firmware Interface) Pre-Extensible Firmware Interface, PEI; and a processing module to load the platform boot firmware (102, 102') when the device (100, 100') is activated, the platform boot firmware (102, 102') causing the processing module to: first execute the pre-verifier, said pre-verifier being configured only to verify (106, 404) a signature of the hash table and not to verify a signature of any platform boot firmware program files; load the hash table and firmware program files from the platform boot firmware; verify (106, 404) the signature of the hash table by the pre-verifier and, in response to determining that the hash table cannot be verified, perform a platform specific security action; if the hash table is signed and successfully verified, calculate (110, 408) a hash for a first platform boot firmware file loaded subsequent to the hash table and determine whether the calculated platform boot firmware file hash is in the hash table; if the calculated hash is in the hash table, load and execute the first platform boot firmware file in a UEFI Driver Execution Environment, DXE, whereas, if the calculated hash is not in the hash table, perform a platform specific security action; after executing the first platform boot firmware file, determine whether all platform boot firmware files have been hashed (110, 408); if all platform boot firmware files have been hashed, continue with the booting of the device (100, 100'), whereas, if there are platform boot firmware files left to be hashed, branch to the calculating (110, 408) of a hash for the next platform boot firmware file. a memory module including at least platform boot firmware (102, 102'), the platform boot firmware (102, 102') comprising a pre-verifier and a hash table that are part of a UEFI (Unified Extensible Firmware Interface) Pre-Extensible Firmware Interface, PEI; and a processing module to load the platform boot firmware (102, 102') when the device (100, 100') is activated, the platform boot firmware (102, 102') causing the processing module to: first execute the pre-verifier, said pre-verifier being configured only to verify (106, 404) a signature of the hash table and not to verify a signature of any platform boot firmware program files; load the hash table and firmware program files from the platform boot firmware; verify (106, 404) the signature of the hash table by the pre-verifier and, in response to determining that the hash table cannot be verified, perform a platform specific security action; if the hash table is signed and successfully verified, calculate (110, 408) a hash for a first platform boot firmware file loaded subsequent to the hash table and determine whether the calculated platform boot firmware file hash is in the hash table; if the calculated hash is in the hash table, load and execute the first platform boot firmware file in a UEFI Driver Execution Environment, DXE, whereas, if the calculated hash is not in the hash table, perform a platform specific security action; after executing the first platform boot firmware file, determine whether all platform boot firmware files have been hashed (110, 408); if all platform boot firmware files have been hashed, continue with the booting of the device (100, 100'), whereas, if there are platform boot firmware files left to be hashed, branch to the calculating (110, 408) of a hash for the next platform boot firmware file. first execute the pre-verifier, said pre-verifier being configured only to verify (106, 404) a signature of the hash table and not to verify a signature of any platform boot firmware program files; load the hash table and firmware program files from the platform boot firmware; verify (106, 404) the signature of the hash table by the pre-verifier and, in response to determining that the hash table cannot be verified, perform a platform specific security action; if the hash table is signed and successfully verified, calculate (110, 408) a hash for a first platform boot firmware file loaded subsequent to the hash table and determine whether the calculated platform boot firmware file hash is in the hash table; if the calculated hash is in the hash table, load and execute the first platform boot firmware file in a UEFI Driver Execution Environment, DXE, whereas, if the calculated hash is not in the hash table, perform a platform specific security action; after executing the first platform boot firmware file, determine whether all platform boot firmware files have been hashed (110, 408); if all platform boot firmware files have been hashed, continue with the booting of the device (100, 100'), whereas, if there are platform boot firmware files left to be hashed, branch to the calculating (110, 408) of a hash for the next platform boot firmware file.