en-US

Enable Device Health Attestation Monitoring and Reporting

Supported on: At least Windows Server 2016, Windows 10 Version 1709

Registry

HKLM Software\Policies\Microsoft\DeviceHealthAttestationService

Value name: EnableDeviceHealthAttestationService

Enabled: EnableDeviceHealthAttestationService = 1

Disabled: EnableDeviceHealthAttestationService = 0

Description

This group policy enables Device Health Attestation reporting (DHA-report) on supported devices. It enables supported devices to send Device Health Attestation related information (device boot logs, PCR values, TPM certificate, etc.) to Device Health Attestation Service (DHA-Service) every time a device starts. Device Health Attestation Service validates the security state and health of the devices, and makes the findings accessible to enterprise administrators via a cloud based reporting portal. This policy is independent of DHA reports that are initiated by device manageability solutions (like MDM or SCCM), and will not interfere with their workflows.