Abstract: Authentication management of software (22) in a product (28) encompasses trust anchor assignment (66) and trust anchor verification (68). A root public key (40) of a root trust anchor (32) is stored (80) in non-changeable memory (54) in the product (28). A signed operational public key (86) is formed by attaching a root signature (84) to an operational public key (44) of an operational trust anchor (34) using a root private key (38). An operational signature (96) is appended to the software (22) using an operational private key. (42) to form signed software (98). The signed operational public key (86) and the signed software (98) are saved in changeable memory (56) in the product (28). Upon verification of the root signature (84) utilizing the root public key (40) and validation of the operational signature (96) using the operational public key (44), the software (22) is authenticated and enabled to execute.