One protected environment proving itself to another on the same machine, without any outside service.
Two enclaves on one processor can prove their identity to each other. Each produces a report that only that processor can check. No network and no vendor service is involved.
Local attestation is the building block of remote attestation: the quoting enclave uses it to check a report before signing it for the outside world.
It is also how a product is split into parts. A small key-handling enclave and a larger application enclave can check each other before they exchange secrets. Each check should be repeated when either side is updated.
Attested cloud workloadsAttested wallets and digital identity
Working on re-attestation for your product? A first call takes 30 minutes and commits you to nothing. Bring your product and the one question that worries you.
Next fixed date: EU Digital Identity Wallets are due in every member state on 24 December 2026, 42 days from now.