A first portion of a Hypervisor is loaded into the memory as a part of an Extensible Firmware Interface upon start up. The first portion is responsible for context switching and some interrupt handling. The first portion of the Hypervisor runs on a root level. An OS is loaded into a highest non-root privilege level. A second portion of the Hypervisor is loaded into OS space together with the operating system, and running on the highest non-root privilege level. A Virtual Machine Monitor is running on the root level. The second portion of the Hypervisor is responsible for (a) servicing the VMM, and (b) enabling communication between VMM code launched on non-root level with the first portion of the Hypervisor to verify the VMM and to enable root mode for the VMM. A Virtual Machine is running on a user level under control of the VMM.