1. A method, comprising retrieving a manifest for an operating system in protected storage of a computing device, the manifest comprising a measurement for an operating system loader, measuring and verifying integrity of a virtual machine monitor, launching via the virtual machine monitor one or more integrity services, launching via the virtual machine monitor a user partition to execute the operating system loader, measuring and verifying the operating system loader with the virtual machine monitor based upon the manifest, and establishing a protected memory channel between the one or more integrity services and the operating system loader of the user partition in response to measuring and verifying the operating system loader based upon the manifest.