Implement cryptographic mechanisms to authenticate organization-defined software or firmware components prior to installation.