2024-04-28 10:40 AEST by Arthur Barrett - should we add device attestation for cvsnt server?

either as a functional feature or at least as a description in the eBook?

Basically a way for the server to reject unattested devices, and accept connections only from attested 
devices.

In theory I think this is probably better done at the device level, rather than the product level (ie: on device 
firewall).  But in this case we should discuss how windows/linux implements this at least.

2024-04-28 10:41 AEST by Arthur Barrett - Created an attachment (id=3688)
example talking about apple

2024-06-06 12:04 AEST by Arthur Barrett - for windows:

Device Health Attestation
https://learn.microsoft.com/en-us/windows-server/security/device-health-attestation

HealthAttestation CSP
https://learn.microsoft.com/en-us/windows/client-management/mdm/healthattestation-csp

and
https://stackoverflow.com/questions/72527762/upload-ek-certificate-into-tpm-nvram


TPM Key Attestation
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/component-updates/tpm-key-
attestation