Methods and apparatus relating to key revocation in system on chip (also referred to as SOC or SoC) devices are described. In an embodiment, a storage device stores an identifier of an Original Equipment Manufacturer (OEM) and key versioning information corresponding to the OEM. At least a portion of the storage device is updated by a security engine in response to a determination that a first OEM key has been replaced with a second OEM key. Other embodiments are also claimed and described.