---
title: "SandGrain Authentication Overview: Daisy Chain & Secure Boot"
description: SandGrain SGA Breakout Board v1 – Overview
---

[Skip to content](https://portal.sandgrain.eu/knowledge-base/sandgrain-authentication-overview-daisy-chain-secure-boot#main-content)

English

Show submenu for translations

![SandGrain\_Logo\_RGB\_white-bijgesneden (1)](https://portal.sandgrain.eu/hs-fs/hubfs/SandGrain_Logo_RGB_white-bijgesneden%20(1).png?width=427&height=83&name=SandGrain_Logo_RGB_white-bijgesneden%20(1).png)

Open main navigation

Close main navigation

- English
  
  Show submenu for translations
- [Contact us](https://portal.sandgrain.eu/login)

[Contact us](https://portal.sandgrain.eu/login?hsLang=en)

 How can we help you?

- There are no suggestions because the search field is empty.

1. [Knowledge Base](https://portal.sandgrain.eu/knowledge-base?hsLang=en)
2. [User Documentation](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en)
3. [Daisy Chain](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#daisy-chain)

October 6, 2026

# SandGrain Authentication Overview: Daisy Chain & Secure Boot

In today’s security-conscious environment, ensuring that devices and host systems can be trusted is critical. SandGrain implements a **multi-layer authentication framework** through **Daisy Chain Authentication** and **Secure Boot Attestation**, providing end-to-end verification of both devices and hosts before allowing sensitive operations.

This overview explains the purpose of each authentication feature, why it’s important, and how it is used .

### **Core Features**

Daisy Chain Generic Flow

**![Generic Mechanism](https://portal.sandgrain.eu/hs-fs/hubfs/Generic%20Mechanism.gif?width=670&height=377&name=Generic%20Mechanism.gif)**

1. [**Token Daisy Chain Authentication**](https://portal.sandgrain.eu/knowledge-base/user-doc/token-daisy-chain-authentication?hsLang=en)  
   Verifies that a device can securely respond to cryptographic challenges. Ensures only genuine devices interact with the system.
   
   [API →](https://portal.sandgrain.eu/knowledge-base/api-doc/token-daisy-chain-authentication?hsLang=en)<https://portal.sandgrain.eu/knowledge-base/api-doc/token-daisy-chain-authentication?hsLang=en>
2. [**Host Daisy Chain Authentication**](https://portal.sandgrain.eu/knowledge-base/user-doc/host-daisy-chain-authentication?hsLang=en)  
   Confirms that host systems communicating with devices are trusted. Protects devices from unauthorized or compromised hosts.
   
   [API →](https://portal.sandgrain.eu/knowledge-base/api-doc/host-daisy-chain-authentication?hsLang=en)
3. [**Daisy Chain Host Response Word (HRW)**](https://portal.sandgrain.eu/knowledge-base/user-doc/daisy-chain-host-response-word-hrw?hsLang=en)  
   Validates the integrity of the device-host chain. Confirms that both token and host successfully passed the Daisy Chain authentication.
   
   [API →](https://portal.sandgrain.eu/knowledge-base/api-doc/daisy-chain-authentication-request?hsLang=en)

Secure Boot Attestation Flow

![Secure Boot Mechanism](https://portal.sandgrain.eu/hs-fs/hubfs/Secure%20Boot%20Mechanism.gif?width=670&height=377&name=Secure%20Boot%20Mechanism.gif)

1. [**Token Secure Boot Attestation**](https://portal.sandgrain.eu/knowledge-base/api-doc/token-secure-boot-attestation?hsLang=en)  
   Verifies the device firmware and boot process. Prevents compromised or tampered firmware from interacting with the system.
   
   API →
2. [**Host Secure Boot Attestation**](https://portal.sandgrain.eu/knowledge-base/user-doc/host-secure-boot-attestation?hsLang=en)  
   Verifies the host’s ability to securely handle devices with validated firmware. Ensures sensitive devices only interact with trusted hosts.
   
   [API →](https://portal.sandgrain.eu/knowledge-base/api-doc/host-secure-boot-attestation?hsLang=en)
3. [**Secure Boot Host Response Word (HRW)**](https://portal.sandgrain.eu/knowledge-base/user-doc/secure-boot-host-response-word-hrw?hsLang=en)  
   Validation confirming both device and host integrity during Secure Boot Attestation. Provides an independent check of the system’s overall security.
   
   [API →](https://portal.sandgrain.eu/knowledge-base/api-doc/secure-boot-attestation-request?hsLang=en)

| [← SandGrain Boards](https://portal.sandgrain.eu/knowledge-base/sandgrain-sga-demo-board-v1-overview?hsLang=en) | [Token Daisy Chain Authentication →](https://portal.sandgrain.eu/knowledge-base/sandgrain-sga-breakout-board-v1-overview-0-0?hsLang=en) |
| --- | --- |

- [User Documentation](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#main-content)

    - [Quick Starter Guide](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#quick-starter-guide)
    - [User Manual](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#user-manual)
    - [Whitepaper](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#whitepaper)
    - [Token Leaflet](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#token-leaflet)
    - [Claim Token Procedure](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#claim-token-procedure)
    - [Daisy Chain](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#daisy-chain)
    - [Release Note](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#release-note)
    - [Naming Convention](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#naming-convention)
    - [SandGrain SDK](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#sandgrain-sdk)
    - [TrustBridge](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#trustbridge)
- [API Documentation](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#main-content)

    - [Device API Integration](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#device-api-integration)
    - [Daisy Chain and Attestation](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#daisy-chain-and-attestation)
- [SDK](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#main-content)

    - [Core Functions](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#core-functions)
    - [SandGrain SDK](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#sandgrain-sdk)

[![SandGrain\_Logo\_RGB\_white-bijgesneden (1)-1](https://portal.sandgrain.eu/hs-fs/hubfs/SandGrain_Logo_RGB_white-bijgesneden%20(1)-1.png?width=427&height=83&name=SandGrain_Logo_RGB_white-bijgesneden%20(1)-1.png "SandGrain_Logo_RGB_white-bijgesneden (1)-1")](https://portal.sandgrain.eu/?hsLang=en)

<https://www.facebook.com/> <https://www.twitter.com/> <https://www.instagram.com/> <https://podcasts.apple.com/> [mailto:email@email.com](mailto:email@email.com)

Copyright © 2026, sandgrain.eu