As we explained, Protected Execution allows software to be run under a protected environment, where no other software can have access to the resources being used by the software, especially RAM memory – i.e. to the data being manipulated and generated by the software. Resources also include devices and processes being executed (i.e., the software itself).

click to enlarge
Figure 4: Protected execution overview.

As you can see on Figure 5, the protected execution is controlled by a new layer called Domain Manager. In order to run, this layer needs a LaGrande Technology-enabled CPU, an LT-enable chipset and a TPM (Trusted Platform Module).

click to enlarge
Figure 5: Protected execution architecture.

It is interesting to note that you can run both protected and unprotected software at the same time on an LT-enabled PC.