1. A trusted host computing device for performing security functions in a distributed computing environment, the trusted host computing device comprising: at least one processor; and memory including instructions that, when executed by the at least one processor, cause the trusted host computing device to: maintain a set of isolated partitions for a plurality of host computing devices, each isolated partition in the set of isolated partitions being associated with a respective host computing device of the plurality of host computing devices, wherein the respective host computing device is separated from the trusted host computing device via a network; establish a secure communication channel between the trusted host computing device and a peripheral card of a host computing device of the plurality of host computing devices; receive, over the secure communication channel from the peripheral card, a first boot firmware measurement of the host computing device, the first boot firmware measurement obtained by the peripheral card accessing one or more memory locations using direct memory access (DMA) on the host computing device; compare the first boot firmware measurement to a list of trusted values to verify the first boot firmware measurement and store the first boot firmware measurement into an isolated partition associated with the host computing device if the first boot firmware measurement is verified; receive a request to verify the host computing device, the request including a second boot firmware measurement of the host computing device, the second boot firmware measurement obtained by the peripheral card; compare the first boot firmware measurement stored in the isolated partition to the second boot firmware measurement; and verify the host computing device if the first boot firmware measurement matches the second boot firmware measurement.