There have been several ideas discussed about enhancements that can be made to the security domain. We need to investigate and propose a design that would start to enhance the security domain to do more than just supply installation tokens.

Some specific enhancements that have been discussed are:

• Allow security domain to be standalone (not tied to CA life-cycle).
• Make security domain enforce subsystem topology constraints.
• Add an interface for manually updating security domain info.