a processor core configured to execute an operating system (OS), wherein the processor core is assigned a non-spoofable physical identifier to indicate the OS is an authorized requesting agent for retrieving public-private key pairs;

an interconnect coupled to the processor core and comprising circuitry defining trusted pathways that are at least one of: physically isolated from untrusted pathways in the interconnect or logically isolated such that the trusted pathways are access controlled from untrusted agents in the interconnect;

a Public Key Infrastructure (PKI) accelerator comprising circuitry configured to generate the public-private key pairs; and

access control circuitry coupled between the interconnect and the PKI accelerator and configured to ensure only authorized requesting agents with correct non-spoofable physical identifiers are permitted to access the public-private key pairs generated by the PKI accelerator.