Firmware, BMC and Platform Root-of-Trust Security for Servers, Edge and Embedded Systems

AMI, formerly American Megatrends and now a Lattice Semiconductor company, builds the firmware layer that boots and manages computing hardware. Founded in Georgia in 1985 and still headquartered in Duluth, the company supplies UEFI BIOS, baseboard management controller software and platform security to ODMs, OEMs, cloud service providers, hyperscalers and enterprise data centers, with engineering operations across the United States, India, Taiwan, China, Germany, Japan and Korea.

Security work centers on Tektagon, a platform root of trust anchored in silicon that validates firmware before the main processor ever executes it. The design follows a detect, protect and recover model: SPI bus filtering and corruption checks surface unauthorized modification, cryptographic attestation and runtime integrity enforcement block injected code, and anti-tamper update workflows restore a known-good image after compromise. It integrates directly with the Aptio boot firmware and MegaRAC management stack rather than sitting alongside them.

Positioning rests on incumbency at a layer most security tooling cannot reach, since the code already ships inside systems built on Intel, AMD, Arm and NVIDIA silicon. Supporting services include a product security incident response team, published CVE advisories, a cloud vulnerability management service and SBOM tooling for component transparency. Participation in NIST, DMTF, OCP and UEFI Forum standards work, alongside open-source community editions of the main products, reinforces that position.