Overview
UEFI is the software that connects a computer's firmware to its operating system. Because it runs before the OS, its security is critical for the overall integrity of the system.
Key Security Features
- Secure Boot: Verifying the signatures of boot software.
- Measured Boot: Recording the boot process in the TPM for later verification.
- User Authentication: Requiring a password or biometric before the OS loads.
- Firmware Update Protection: Ensuring that only authorized firmware updates can be installed.
Threats
Attackers target UEFI because a compromise at this level is extremely difficult to detect and can survive a complete reinstallation of the operating system.