Abstract: In an approach to secure firmware updating, a system comprises: one or more user devices, each of the one or more user devices having one or more firmware modules; one or more computing devices; a digital signature repository; and a z-engine circuitry. The z-engine circuitry is configured to: receive firmware for a particular user device of the one or more user devices; receive a non-repeating input data; retrieve a hardware digital profile of the particular user device from the digital signature repository; process the non-repeating input data with the hardware digital profile to generate a unique result; perform a hash operation on the unique result to generate an encryption key; encrypt the firmware for the particular user device with the encryption key; and send the encrypted firmware to the particular user device.