.. _pureboot:
PureBoot
========
PureBoot is Purism's cutting edge, complete secured boot process and combines a number of technologies including:
* `Neutralized and Disabled Intel Management Engine `_ where only the code absolutely essential for the system to boot is left in the ME.
* `Coreboot `_ the free software BIOS replacement.
* A Trusted Platform Module (TPM) chip
* :ref:`heads` our tamper-evident boot software that loads from within coreboot and uses the TPM and the user's own GPG keys to detect tampering within the BIOS, kernel, and GRUB config.
* :ref:`librem_key` our USB security token that integrates with Heads `to alert the user to tampering `_ with an easy "green light good, red light bad" process.
* Integration between the Librem Key and LUKS disk encryption so you can unlock your disk with your Librem Key.
.. toctree::
:maxdepth: 1
PureBoot/GettingStarted
PureBoot/Coreboot
PureBoot/Heads
PureBoot/IntelME
PureBoot/LibremKeyLUKS