Remote Attestation

Remote Attestation is a cryptographic protocol: it verifies the integrity and authenticity of a remote computing platform before granting access to sensitive data or resources.

This is your critical security checkpoint for untrusted environments. Remote Attestation enables a Verifier to confirm that a remote system (the Attester) is running an uncompromised, approved software and hardware stack. The Attester uses a hardware Root of Trust (e.g., a Trusted Platform Module or TPM) to generate cryptographically signed measurements (Evidence) of its boot and runtime state. The Verifier checks this Evidence against a known-good baseline, then issues an Attestation Token to the Relying Party. This process is essential for Confidential Computing: it ensures sensitive workloads run securely within Trusted Execution Environments (TEEs) like Intel SGX enclaves.

https://learn.microsoft.com/en-us/azure/attestation/overview