A method for implementing trusted computing, the method comprising: for each software component in a sequence of software components , executing the respective software component by a central processing unit, CPU , wherein the sequence of software components is stored on a storage device at a location from where the CPU is configured to load a first instruction at a boot process, said storage device being writable and configured to provide persistent write-protection, wherein said persistent write-protection is configured to be activated in response to a software instruction and, once activated, to persist until a next boot process starts, wherein each respective software component is configured to measure a next software component in the sequence and at least the first of the software components in the sequence of software components represents an entity implementing a Core Root of Trust of Measurement, CRTM; measuring, by the respective software component , a next software component in the sequence, and comparing the resulting measurement to a reference measurement stored on the storage device ; storing, by the respective software component , the measurement of said software component in Platform Configuration Registers, PCRs, in a restricted access area on the storage device ; encrypting data stored in the restricted access area on the storage device ; activating said persistent write-protection of the storage device if the resulting measurement does not match the reference measurement or if no more software components remain to be measured; and executing an operating system kernel , wherein the operating system kernel is configured to isolate user applications from kernel applications. for each software component in a sequence of software components , executing the respective software component by a central processing unit, CPU , wherein the sequence of software components is stored on a storage device at a location from where the CPU is configured to load a first instruction at a boot process, said storage device being writable and configured to provide persistent write-protection, wherein said persistent write-protection is configured to be activated in response to a software instruction and, once activated, to persist until a next boot process starts, wherein each respective software component is configured to measure a next software component in the sequence and at least the first of the software components in the sequence of software components represents an entity implementing a Core Root of Trust of Measurement, CRTM; measuring, by the respective software component , a next software component in the sequence, and comparing the resulting measurement to a reference measurement stored on the storage device ; storing, by the respective software component , the measurement of said software component in Platform Configuration Registers, PCRs, in a restricted access area on the storage device ; encrypting data stored in the restricted access area on the storage device ; activating said persistent write-protection of the storage device if the resulting measurement does not match the reference measurement or if no more software components remain to be measured; and executing an operating system kernel , wherein the operating system kernel is configured to isolate user applications from kernel applications. <EOS>