1. A client system update network comprising: a client hosted virtualization system (CHVS) having: a security processor; and a non-volatile memory including: first code to implement a basic input/output system for the CHVS; and second code to implement a virtualization manager, wherein the virtualization manager operates to initialize the CHVS and launch a virtual machine on the CHVS; and a client update system coupled to the CHVS to: receive third code including an update to the second code; encrypt the third code; establish a secure communication channel with the CHVS with the security processor, to: authenticate the CHVS; and send the third code to the CHVS if the CHVS is authenticated; wherein the CHVS operates to: receive the third code; decrypt and authenticate the third code with the security processor; and in response to determining that the third code is authentic, overwrite the non-volatile memory such that the second code is replaced with the third code; and wherein the CHVS is configurable. to execute the first code and not the third code, or to execute the third code and not the first code.