A first Network Function Virtualization (NFV) computer system generates Hardware Root-of-Trust (HRoT) challenge data and transfers the HRoT challenge data in first Border Gateway Protocol (BGP) signaling to a second NFV computer system. The second NFV computer system identifies a physically-embedded HRoT code and generates an HRoT result based on the challenge data and code. The second NFV computer system transfers second BGP signaling having the HRoT result to the first NFV computer system. The first NFV computer system compares the HRoT result from the second BGP signaling to target HRoT data. The first NFV computer system executes a BGP process based on the second BGP signaling if the HRoT result corresponds to the target HRoT data. In some examples, the NFV computer systems also exchange the BGP signaling to verify NFV time slices for BGP Virtual Machines (VMs).