Arrangements for updating software, such as initial trusted code and data, are described, including providing proof of execution of the update. The mechanism for updating the software is logically or physically separated from the general purpose CPU of the system. Thus, the update mechanism can be trusted even if the system to be updated may be compromised.