# Features Source: [https://docs.qualcomm.com/doc/80-70014-11/topic/features.html](https://docs.qualcomm.com/doc/80-70014-11/topic/features.html) Qualcomm TEE enhances the security features and their extensions. It offers interfaces that allow the extension of the security feature set through TA. Certain features are integrated into the hardware-supported TZ architecture, providing a system security configuration. These features can be further customized to meet specific requirements. For information on Qualcomm TEE and secure components, see [Qualcomm TEE](https://docs.qualcomm.com/doc/80-70014-11/topic/qualcomm-trusted-execution-environment.html) and [Architecture](https://docs.qualcomm.com/doc/80-70014-11/topic/architecture.html). Unlock the full potential of Secure Boot technology on Qualcomm devices in this comprehensive tutorial. From generating cryptographic keys to programming hardware fuses and managing secure boot status, this video covers every step in detail. Ideal for developers aiming to enhance device security through authenticated boot processes. Learn how to use Qualcomm's tools effectively to ensure your device boots securely every time. Video: Qualcomm Processor Security – Foundations Video: Qualcomm Processor Security – Foundations Learn how to use Qualcomm's Type 1 Hypervisor and Trusted Execution Environment in this comprehensive tutorial. Dive deep into platform virtualization, secure communication, and the extensive security features offered by Qualcomm Technologies. Learn how to develop secure applications using Qualcomm's tools and APIs, and understand the critical security use cases and compliance standards that Qualcomm supports. Perfect for developers aiming to enhance device security and functionality. Video: Qualcomm Processor Security - TEE and Chipset Service Video: Qualcomm Processor Security - TEE and Chipset Service Note: The information related to features in this guide is descriptive and intended for your understanding. For any configurations or customizations, see [Configure](https://docs.qualcomm.com/doc/80-70014-11/topic/configure.html) and [Customize](https://docs.qualcomm.com/doc/80-70014-11/topic/customize.html). - **[Cryptography](https://docs.qualcomm.com/doc/80-70014-11/topic/crypto-core.html)** Qualcomm Linux security offering includes support for both hardware and software-based cryptography. - **[Key management](https://docs.qualcomm.com/doc/80-70014-11/topic/key-management.html)** The Qualcomm security solution supports the public-key cryptography standards (PKCS#11) by implementing the PKCS#11 APIs. This allows applications to use keys and certificates in a platform-independent manner. - **[Secure boot](https://docs.qualcomm.com/doc/80-70014-11/topic/secure-boot.html)** Secure boot is the boot-up sequence that establishes a trusted platform for the entire software stack. - **[Storage security](https://docs.qualcomm.com/doc/80-70014-11/topic/secure-file-system.html)** The secure file system (SFS) is used to store sensitive data, such as keys and biometric data. - **[Storage encryption](https://docs.qualcomm.com/doc/80-70014-11/topic/file-based-encryption.html)** Storage encryption enhances security by supporting the transparent encryption of files and directories. - **[SMC invoke](https://docs.qualcomm.com/doc/80-70014-11/topic/smcinvoke.html)** The secure monitor call (SMC) invoke is used to expose the services and interfaces implemented in Qualcomm TEE to Linux clients. It provides identification information about the requesting processes to Qualcomm TEE. - **[Access control](https://docs.qualcomm.com/doc/80-70014-11/topic/access-control.html)** The access control trust model ensures ongoing security and manages access control configurations among assets, interfaces, SoC components, and images. - **[Secure peripheral image loading](https://docs.qualcomm.com/doc/80-70014-11/topic/secure-peripheral-image-loading.html)** The secure peripheral image loading (PIL) of a TZ authenticates different images and configures the xPUs for all subsystems such as audio, camera, and video. - **[SELinux](https://docs.qualcomm.com/doc/80-70014-11/topic/selinux.html)** SELinux is a security enhancement for Linux, providing greater control over system access. It implements mandatory access control (MAC) in the Linux kernel using the Linux security modules (LSM) framework. - **[Qualcomm TEE](https://docs.qualcomm.com/doc/80-70014-11/topic/qualcomm-trusted-execution-environment.html)** Qualcomm TEE is the software that operates within the Arm TZ environment on the Qualcomm device. - **[Qualcomm Hypervisor](https://docs.qualcomm.com/doc/80-70014-11/topic/hypervisor.html)** The Qualcomm Hypervisor provides a modern virtualization framework that allows multiple operating systems to run independently and concurrently, delivering high performance. - **[Qualcomm WES](https://docs.qualcomm.com/doc/80-70014-11/topic/qwes.html)** Qualcomm WES is a suite of trusted services, rooted in hardware, that securely connects and manages devices. - **[Security hardening](https://docs.qualcomm.com/doc/80-70014-11/topic/security-hardening.html)** Security hardening is a process that minimizes the risk of system attacks by making it more difficult an attacker to exploit the system vulnerabilities. Last Published: Aug 06, 2024 [Previous Topic Getting started](https://docs.qualcomm.com/bundle/publicresource/80-70014-11/topics/get-started.md) [Next Topic Cryptography](https://docs.qualcomm.com/bundle/publicresource/80-70014-11/topics/crypto-core.md)