Patent ID: 8185750

Claim:
A processor implemented method in a data processing system for extending a core root of trust for measurement within a trusted computing platform, comprising: responsive to compiling a module image within a manufacturing environment of the trusted computing platform, generating a hash value of the module image during a build process within the manufacturing environment of the trusted computing platform, wherein the hash value is generated from one or more metrics measured by the build process; determining if the hash value of the module image is to be an extension of a core root of trust for measurement; in response to determining that the hash value of the module image is to be an extension of the core root of trust for measurement: creating, within the manufacturing environment of the trusted computing platform, a digital signature for the module image using an extension private key of the core root of trust for measurement; and adding the digital signature to the module image within the manufacturing environment of the trusted computing platform-to allow platform manufacturer controlled and certified code to be incorporated into functions of the core root of trust for measurement based on a policy defined by the platform manufacturer for accepting a new function into the core root of trust for measurement.