AMD Platform Secure Boot

AMD Platform Secure Boot (PSB) is a silicon-level hardware security architecture embedded directly within AMD EPYC, Ryzen PRO, and embedded processors designed to establish an immutable root of trust and protect compute infrastructure against firmware attacks, bootkits, and unauthorized firmware tampering. Cyber adversaries increasingly target low-level firmware and BIOS components because traditional operating system security controls and antivirus agents operate above this layer and cannot detect firmware compromises. AMD PSB leverages the integrated AMD Secure Processor (ASP)—a dedicated 32-bit hardware crypto-processor integrated on the processor die—to cryptographically verify the digital signature of the initial BIOS boot code before the x86 processor executes a single instruction. If the cryptographic signature does not match the hardware-fused vendor key, the processor halts execution immediately, preventing compromised firmware from executing. Furthermore, AMD PSB allows original equipment manufacturers (OEMs) and enterprise datacenters to cryptographically bind firmware to specific hardware components using one-time programmable (OTP) fuses, preventing hardware theft and motherboard tampering. By establishing a cryptographically verified hardware root of trust, AMD Platform Secure Boot guarantees system boot integrity, satisfies stringent defense and enterprise security standards, and defends modern datacenters from advanced physical and supply chain attacks.