Recording a hash of each boot component into a hardware register, so the boot chain can be reported and verified later.
With measured boot, firmware, bootloader and kernel are measured into TPM registers (PCRs) or TEE equivalents before they run. A quote over those registers is the basis of most device and server attestation.
Every update changes the measurements. Without managed reference values, updates break attestation or tempt teams to loosen policy.
Example. A gateway boots. Firmware, bootloader and kernel are each recorded in the TPM before they run. A changed bootloader shows up as a changed record.
Attested devicesAttested robotsAttested autonomous vehicles and machines
Working on re-attestation for your product? A first call takes 30 minutes and commits you to nothing. Bring your product and the one question that worries you.
Next fixed date: EU Digital Identity Wallets are due in every member state on 24 December 2026, 42 days from now.