1. A method comprising: authenticating a user of a platform during a Basic Input/Output System (BIOS) boot process; releasing a first keying material from a token communicatively coupled to the platform in response to authenticating the user; combining the first keying material with a second keying material internally stored within the platform in order to produce a combination key; and using the combination key to decrypt a second BIOS area to recover a second segment of BIOS code.