How do I install the Boot Guard skill?

Run npx skillmds@latest add open-edge-platform/boot-guard in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Boot Guard skill do?

Report Intel Boot Guard provisioning state, profile (0, 3, 4, or 5), and Verified/Measured Boot modes. Use when asked about Boot Guard, BtG profiles, or firmware root of trust. It is listed under AI & ML on SkillMD.

Is Boot Guard safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Boot Guard?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Boot Guard free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Boot Guard?

open-edge-platform (@open-edge-platform) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Boot Guard by open-edge-platform — Agent Skill

Name: Boot Guard
Author: open-edge-platform

File contents

Intel Boot Guard Configuration Skill

Purpose

This skill reports the current Intel Boot Guard configuration on the target system.

What to Report

Boot Guard provisioning status (Provisioned/Not Provisioned)
Profile number (0, 3, 4, or 5)
Verified Boot mode (Enabled/Disabled)
Measured Boot mode (Enabled/Disabled)

Background

Boot Guard Profiles

Profile	Verified Boot	Measured Boot	Description
0	No	No	Not provisioned
3	No	Yes	Measured Boot only
4	Yes	No	Verified Boot only
5	Yes	Yes	Verified + Measured Boot

Commands

Read Boot Guard MSR

# Load MSR module
sudo modprobe msr

# Read Measured (bit 5) and Verified (bit 6) Boot bits together
sudo rdmsr --bitfield 6:5 0x13A

Interpreting --bitfield 6:5 output:

Value	Verified Boot	Measured Boot	Profile
0	Disabled	Disabled	0
1	Disabled	Enabled	3
2	Enabled	Disabled	4
3	Enabled	Enabled	5

Check PCR0 (Boot Guard measurements)

tpm2_pcrread sha256:0

Output Format

INTEL BOOT GUARD
  Status: Provisioned/Not Provisioned
  Profile: 5 (Verified + Measured Boot)
  Verified Boot: Enabled/Disabled
  Measured Boot: Enabled/Disabled
  PCR0: Has measurements / Empty

Dependencies

msr-tools package (for rdmsr)
tpm2-tools package
Root/sudo access

Notes

Boot Guard is provisioned at manufacturing by the OEM. It cannot be enabled by the end user after system manufacture.

Frequently asked questions

Boot Guard