1. A method for establishing a trusted path between a user interface and a trusted executable, wherein the trusted path includes a hypervisor, said method executed on a computer, comprising: receiving an signal from a user, said signal being input by said user on a verification device in communication with said computer; in response to receiving said signal, measuring an identity of the hypervisor by comparing the measurement of the identity of the hypervisor with a policy for the hypervisor stored on said verification device; measuring an identity of a user interface connected to said computer; comparing the measurement of the identity of the user interface with a policy for the user interface; starting a driver shim; measuring an identity of the driver shim by comparing the measurement of the identity of the driver shim with a policy for the driver shim; providing a human-perceptible indication, on said verification device, of whether the identity of the hypervisor, the identity of the driver shim, and the identity of the user interface correspond with the policy for the hypervisor, the policy for the driver shim, and the policy for the user interface, respectively.