MDM_HealthAttestation class

Article
12/11/2020

[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.]

The MDM_HealthAttestation class enables enterprise IT managers to assess the health of managed devices and take enterprise policy actions.

The following is a list of functions performed by the HealthAttestation CSP:

Collects data that is used in verifying a devices health states
Forwards the data to the Health Attestation Service (HAS)
Provisions the Health Attestation Certificate that it receives from HAS
Upon request, forwards the Health Attestation Certificate (received from HAS) and related runtime information to the MDM Server for verification

The following syntax is simplified from MOF code and includes all inherited properties.

Syntax

[InPartition("local-system"), dynamic, provider("DMWmiBridgeProv")]
class MDM_HealthAttestation
{
  string  InstanceID;
  string  ParentID;
  sint32  Status;
  boolean ForceRetrieve;
  string  Certificate;
  string  Nonce;
  string  CorrelationID;
  sint32  TpmReadyStatus;
  sint32  MaxSupportedProtocolVersion;
  sint32  PreferredMaxProtocolVersion;
  sint32  CurrentProtocolVersion;
  string  HASEndpoint;
};

Members

The MDM_HealthAttestation class has these types of members:

Methods
Properties

Methods

The MDM_HealthAttestation class has these methods.

Method	Description
VerifyHealthMethod	Method to notify the device to prepare a health certificate verification request.

Properties

The MDM_HealthAttestation class has these properties.

Certificate

Data type: string
Access type: Read/write
Qualifiers: Octetstring

CorrelationID

Data type: string
Access type: Read/write

CurrentProtocolVersion

Data type: sint32
Access type: Read/write

TBD

ForceRetrieve

Data type: boolean
Access type: Read/write

HASEndpoint

Data type: string
Access type: Read/write

InstanceID

Data type: string
Access type: Read-only
Qualifiers: key

Identifies the name of the parent node. For this class, the string is "HealthAttestation".

MaxSupportedProtocolVersion

Data type: sint32
Access type: Read/write

TBD

Nonce

Data type: string
Access type: Read/write

ParentID

Data type: string
Access type: Read-only
Qualifiers: key

Describes the full path to the parent node. For this class, the string is "./Vendor/MSFT/"

PreferredMaxProtocolVersion

Data type: sint32
Access type: Read/write

TBD

Status

Data type: sint32
Access type: Read/write

TpmReadyStatus

Data type: sint32
Access type: Read/write

Requirements

Requirement	Value
Minimum supported client	Windows 10 [desktop apps only]
Minimum supported server	None supported
Namespace	Root\cimv2\mdm\dmmap
MOF	DMWmiBridgeProv.mof
DLL	DMWmiBridgeProv.dll