The process after a flaw in a trusted execution environment: the vendor ships a fix, raises the security version, and verifiers stop accepting evidence from unpatched platforms.
TCB stands for trusted computing base: the hardware, firmware and microcode a TEE depends on. Each attestation report states its versions.
After a flaw, the vendor publishes a fixed version. Operators patch. Verifiers raise the minimum they accept. Platforms attest again and old evidence is refused.
TCB recovery is re-attestation at industry scale. A product that cannot raise a minimum version and re-verify its fleet cannot take part in it.
Attested AIAttested cloud workloads
Working on re-attestation for your product? A first call takes 30 minutes and commits you to nothing. Bring your product and the one question that worries you.
Next fixed date: EU Digital Identity Wallets are due in every member state on 24 December 2026, 42 days from now.