Described herein is an implementation for secure deployment, over a network, of software (e.g., an operating system) and updates to a bare computer (e.g., a server), so that it is not susceptible to malicious network-based intrusion.