Security

Boot Integrity Services (BIS) was defined to address the potential vulnerability exposed by validating the image. Using BIS, firmware built into the client PC can validate, before executing a boot image, that the image came from a trusted source and was not tampered with en route. BIS employs a digital signature and public-key cryptography to ensure that systems booting from the network use only approved boot images.