Device attestation is a security check that lets a device prove its identity or integrity with cryptographic evidence. Instead of trusting a label, a management system verifies signed measurements from hardware, firmware, or a trusted execution environment. The result can show that the device booted approved code, has not been tampered with, and is running in a known state.
This matters because edge devices and industrial controllers are hard to inspect directly and are often targeted for persistent compromise. Attestation helps defenders detect unauthorized firmware changes, bootkit-style persistence, spoofed hardware, and unsafe configuration drift. In practice it can be used at startup or continuously, feeding access control, fleet monitoring, or incident response. Like any control, it depends on a strong trust anchor and a clear threat model: if the reporting path can be forged or the measurement source is weak, the attestation signal loses value.