BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

IA-03(04) Device Attestation

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged IA part of IA-3

Title

Device Attestation

Control

Handle device identification and authentication based on attestation by [Assignment: configuration management process].

Discussion

Device attestation refers to the identification and authentication of a device based on its configuration and known operating state. Device attestation can be determined via a cryptographic hash of the device. If device attestation is the means of identification and authentication, then it is important that patches and updates to the device are handled via a configuration management process such that the patches and updates are done securely and do not disrupt identification and authentication to other devices.

Parameters

ia-03.04_odp: configuration management process

Related controls

cm-2, cm-3, cm-6

Assessment objective

IA-03(04) device identification and authentication are handled based on attestation by [Assignment: configuration management process].

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).