This is the one feature that Trusted Execution Technology (TXT) does not provide. We really wanted to have something like that for a security type appliance, bu

This is the one feature that Trusted Execution Technology (TXT) does not provide. We really wanted to have something like that for a security type appliance, but it is impossible. The only thing TXT provides is the ability to prove to a third party that you are running an unmodified version of the software endorsed by them, so they can avoid sending their valuable content to a device controlled by you. It doesn't help you to ensure that the device will only boot software endorsed by you (or anybody), only to prove what software is running to somebody else. But one should probably be lucky that that functionality is missing...