1. A method comprising: responsive to a system management mode interrupt (SMI), determining a trust level associated with code invoking the SMI; and responsive to determining that the trust level is untrusted, when a request made by the code invoking the SMI either does not require access to a cryptographic hardware device or is unrelated to the cryptographic hardware device, granting the request; and when a request made by the code invoking the SMI either requires access to a cryptographic hardware device or is related to the cryptographic hardware device, blocking access to the cryptographic device and presenting a virtualization of access to the cryptographic device to the code invoking the SMI.