A method and
system to support secure
booting and configuration. The mechanism employs an
optical link comprising a
quantum channel that is used to send data encoded as
quantum bits (qubits) via respective photons. Qubits encoded using a first random basis at the
client and are sent to the boot
server, which processes the qubits using a second random basis to extract the encoded data. A public channel is used to send data indicative of the second random basis to the
client. A symmetric
quantum key is then derived a both the
client and the boot
server using a comparison of the random basis' and the original and extracted data. The scheme enables the presence of an eavesdropper to be detected on the
quantum channel. A DHCP message exchange is employed to obtain a
network address, and, optionally, be provided with a
network address for one or more boot servers. A boot image request is made to the boot
server by the client, and a subsequent boot image is downloaded via a
secure channel facilitated by the symmetric quantum key.