Described is a system and method in which a system and method in which a
device manufacturer or software image provider controls which devices are
allowed to install or to run a software image. An image keying mechanism
uses package data and UUID associated with the device or class of devices
to key an image. Because the UUID is used in the key, an installer
verifier and/or boot-time verifier can ensure that the device is
authorized to install and/or run the image. Any package, including
existing device packages or the package for which installation is
requested can demand that keying be enforced. An installer mechanism
checks whether the device is allowed to install the image. A boot-time
enforcement mechanism prevents an improperly installed image from
operating by halting the boot process if a demanded key is invalid or
missing.
