The SoCs (System-on-Chip) that Nokia and others use have a small piece of code and a set of keys in ROM to check the authenticity of the bootloader. The bootloader then checks the authenticity of the firmware image (e.g. Symbian OS), which in turn checks the authenticity of each piece of software to be installed.