Secure Boot Trust: Who Owns the Virtual Firmware State
Secure Boot trust is not solely a property of the hypervisor. It is enforced through virtual-firmware state, and the parties that initialize, inherit and update that state are not necessarily the parties that rely on it. A hypervisor can offer Secure Boot, an image can carry a bootloader that assumes it, and a guest operating…