A computer system comprising: a main operating system interface engine configured to receive instructions from a main operating system of one or more host systems and operative to manage a virtualized environment; the main operating system interface engine facilitating at least one of installation or updates of the virtualization environment; a virtualization environment management engine coupled to the main operating system interface engine and operative to manage the virtualization environment, the virtualization environment maintaining one or more virtual machine instances to virtualize resources of the one or more host systems; the virtualization environment management engine initializing the virtualization environment and instructing the main operating system interface engine to reboot the host system so that the main operating system is restarted; a virtual machine management engine coupled to the virtualization environment management engine and operative to manage the one or more virtual machine instances in the virtualization environment, each of the one or more virtual machine instances operative to provide virtualized resources of the one or more host systems for a compute access system coupled to the one or more host systems; a virtualization environment security engine coupled to the virtualization environment management engine and operative to provide security for the virtualization environment, the virtualization environment security engine being coupled to secure hardware of the one or more host systems and using the secure hardware to provide the security for the virtualization environment, the secure hardware comprising a chip configured to securely cryptographically sign data in the virtualization environment, wherein in operation the securely cryptographically signed data is used to verify an image of the virtualized environment is trusted and, after the image of the virtualized environment is trusted, secure disk access is enabled; a virtual machine state data transfer engine coupled to the virtualization environment management engine and operative to maintain a state of the virtualization environment and to save a state of the virtualization environment to a delta file on the one or more host systems. a main operating system interface engine configured to receive instructions from a main operating system of one or more host systems and operative to manage a virtualized environment; the main operating system interface engine facilitating at least one of installation or updates of the virtualization environment; a virtualization environment management engine coupled to the main operating system interface engine and operative to manage the virtualization environment, the virtualization environment maintaining one or more virtual machine instances to virtualize resources of the one or more host systems; the virtualization environment management engine initializing the virtualization environment and instructing the main operating system interface engine to reboot the host system so that the main operating system is restarted; a virtual machine management engine coupled to the virtualization environment management engine and operative to manage the one or more virtual machine instances in the virtualization environment, each of the one or more virtual machine instances operative to provide virtualized resources of the one or more host systems for a compute access system coupled to the one or more host systems; a virtualization environment security engine coupled to the virtualization environment management engine and operative to provide security for the virtualization environment, the virtualization environment security engine being coupled to secure hardware of the one or more host systems and using the secure hardware to provide the security for the virtualization environment, the secure hardware comprising a chip configured to securely cryptographically sign data in the virtualization environment, wherein in operation the securely cryptographically signed data is used to verify an image of the virtualized environment is trusted and, after the image of the virtualized environment is trusted, secure disk access is enabled; a virtual machine state data transfer engine coupled to the virtualization environment management engine and operative to maintain a state of the virtualization environment and to save a state of the virtualization environment to a delta file on the one or more host systems.