Patent ID: 8812828

Claim:
A method comprising: performing pre-initialization of a trusted platform module (TPM) in response to a hardware reset; and determining whether a hardware-based root of trust logic is enabled or disabled based on a configuration policy record stored in a non-volatile memory location, wherein if the hardware-based root of trust logic is enabled: initializing, via an authenticated code module, the TPM and performing binary measurement on basic input/output system (BIOS) code using the hardware-based root of trust logic, and determining whether a status returned from the authenticated code module is indicative of an error, wherein a firmware interface table (FIT) provides status bits relating to the error, wherein if the status is not indicative of an error: performing a trusted platform process on extended BIOS components using a BIOS root of trust logic, wherein if the status is indicative of an error: writing to the non-volatile memory location to disable the hardware-based root of trust logic in a next boot sequence, and causing a hardware reset, and wherein if the hardware-based root of trust logic is disabled: initializing, via the BIOS, the TPM and performing the trusted platform process using the BIOS root of trust logic.