A mechanism for proving to a remote verifier that a system is running approved software and configuration state.