A computing system , comprising: one or more processors ; a first memory device operatively connected to the one or more processors to provide a first boot path, the first memory device storing a first firmware element for booting a first operating system; a second memory device operatively connected to the one or more processors to provide a second boot path, the second memory device storing a second firmware element for booting a second operating system; a second security module operatively connected to the one or more processors, the second security module configured to ensure the second operating system can safely run on the one or more processors; and a selector circuit operatively connected to the one or more processors, the first memory device, and the second memory device; wherein the one or more processors are configured: to boot either the first operating system or the second operating system according to a selected boot path determined by a selection signal, when a first security module, which is configured to ensure the first operating system can safely run on the one or more processors, is operatively connected to the one or more processors, and to boot the second operating system when the first security module is not operatively connected to the one or more processors; wherein the selector circuit is configured to select one of the first and second boot paths based on the selection signal. one or more processors ; a first memory device operatively connected to the one or more processors to provide a first boot path, the first memory device storing a first firmware element for booting a first operating system; a second memory device operatively connected to the one or more processors to provide a second boot path, the second memory device storing a second firmware element for booting a second operating system; a second security module operatively connected to the one or more processors, the second security module configured to ensure the second operating system can safely run on the one or more processors; and a selector circuit operatively connected to the one or more processors, the first memory device, and the second memory device; wherein the one or more processors are configured: to boot either the first operating system or the second operating system according to a selected boot path determined by a selection signal, when a first security module, which is configured to ensure the first operating system can safely run on the one or more processors, is operatively connected to the one or more processors, and to boot the second operating system when the first security module is not operatively connected to the one or more processors; to boot either the first operating system or the second operating system according to a selected boot path determined by a selection signal, when a first security module, which is configured to ensure the first operating system can safely run on the one or more processors, is operatively connected to the one or more processors, and to boot the second operating system when the first security module is not operatively connected to the one or more processors; wherein the selector circuit is configured to select one of the first and second boot paths based on the selection signal. <EOS>