Able to be attested again: to prove its identity or integrity anew after a reset, an expiry or a change.
Reattestable combines re- (again), attest (to verify as true or genuine) and -able. A reattestable system can prove itself again, as often as needed, without a person stepping in.
In workload identity systems such as SPIFFE/SPIRE, a reattestable node can prove its identity again after its credentials expire or its local state is lost. SPIRE records for every attested node whether it can re-attest. Nodes that cannot are trust on first use: once their state is gone, an administrator has to remove the old record before they can join again.
In compliance, the word describes a status or document that can be re-certified later: an access approval, a certificate or a vendor assessment.
Reattested is the result: the proof was made again, recently, and it still holds.
Example. A server loses its disk. A reattestable server proves itself from its TPM and is back in the cluster in minutes. One that is not waits for an administrator to delete its old record.
Attested cloud workloadsAttested devices
Working on re-attestation for your product? A first call takes 30 minutes and commits you to nothing. Bring your product and the one question that worries you.
Next fixed date: EU Digital Identity Wallets are due in every member state on 24 December 2026, 42 days from now.