---
title: Host Secure Boot Attestation
description: Host Secure Boot Attestation
---

[Skip to content](https://portal.sandgrain.eu/knowledge-base/api-doc/host-secure-boot-attestation#main-content)

English

Show submenu for translations

![SandGrain\_Logo\_RGB\_white-bijgesneden (1)](https://portal.sandgrain.eu/hs-fs/hubfs/SandGrain_Logo_RGB_white-bijgesneden%20(1).png?width=427&height=83&name=SandGrain_Logo_RGB_white-bijgesneden%20(1).png)

Open main navigation

Close main navigation

- English
  
  Show submenu for translations
- [Contact us](https://portal.sandgrain.eu/login)

[Contact us](https://portal.sandgrain.eu/login?hsLang=en)

 How can we help you?

- There are no suggestions because the search field is empty.

1. [Knowledge Base](https://portal.sandgrain.eu/knowledge-base?hsLang=en)
2. [API Documentation](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en)
3. [Daisy Chain and Attestation](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#daisy-chain-and-attestation)

October 6, 2026

# Host Secure Boot Attestation

### Request Host Secure Boot Attestation

This endpoint initiates host-side Secure Boot attestation using a **Host Challenge Word (HCW)**. The client provides the ordered device chain along with the **HCW** and the corresponding **Host Response Word (HRW)**. The service begins the attestation process and returns a transaction ID, which can be used to track the status of the host Secure Boot attestation.

#### Method & Endpoint

**Method:** POST

**Endpoint:** `/api/device/requestHostSecureBootAttestation`

**Headers:** `CF-Access-Client-ID` and `CF-Access-Client-Secret`

#### Request Body

```
{  "requestSignedResponse": false,  "HCW": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",  "chain": [    {      "sequence": 1,      "TID": "800000001000000010000000000000014464b592da61f3fd5506fcb1f37f4bef",      "data": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"    },    {      "sequence": 2,      "TID": "800000001000000010000000000000014464b592da61f3fd5506fcb1f37f4bef",      "data": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"    },    {      "sequence": 3,      "TID": "800000001000000010000000000000014464b592da61f3fd5506fcb1f37f4bef",      "data": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"    }  ],  "HRW": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"}
```

#### ✅ Successful Response — 201 Created

```
{  "transactionId": "123e4567-e89b-12d3-a456-426614174000"}
```

#### ❌ Error Responses

**401 Unauthorized** — Invalid authentication

```
{  "statusCode": 401,  "message": "Unauthorized"}
```

**403 Forbidden** — Authorization Forbidden

```
{  "statusCode": 403,  "message": "Invalid request",  "error": "Forbidden"}
```

---

### Check Host Secure Boot Attestation Status

This endpoint allows the client to check the current status of a host-initiated Secure Boot attestation. By providing the transaction ID in the headers, the client can determine whether the attestation has succeeded, failed, or is still in progress.

#### Method & Endpoint

**Method:** GET

**Endpoint:** `/api/device/checkHostSecureBootAttestationStatus`

**Headers:** `transactionId` , `CF-Access-Client-Id` and `CF-Access-Client-Secret`

#### ✅ Successful Response — 201 Created

```
{  "status": [    "AUTH_OK",    "AUTH_NOT_OK",    "PROCESSING"  ]}
```

#### ❌ Error Responses

**401 Unauthorized** — Invalid authentication

```
{  "statusCode": 401,  "message": "Unauthorized"}
```

**403 Forbidden** — Authorization Forbidden

```
{  "statusCode": 403,  "message": "Invalid request",  "error": "Forbidden"}
```

| [← Token Secure Boot Attestation](https://portal.sandgrain.eu/knowledge-base/api-doc/token-secure-boot-attestation?hsLang=en) | [Secure Boot Attestation Request →](https://portal.sandgrain.eu/knowledge-base/api-doc/secure-boot-attestation-request?hsLang=en) |
| --- | --- |

- [User Documentation](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#main-content)

    - [Quick Starter Guide](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#quick-starter-guide)
    - [User Manual](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#user-manual)
    - [Whitepaper](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#whitepaper)
    - [Token Leaflet](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#token-leaflet)
    - [Claim Token Procedure](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#claim-token-procedure)
    - [Daisy Chain](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#daisy-chain)
    - [Release Note](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#release-note)
    - [Naming Convention](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#naming-convention)
    - [SandGrain SDK](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#sandgrain-sdk)
    - [TrustBridge](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#trustbridge)
- [API Documentation](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#main-content)

    - [Device API Integration](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#device-api-integration)
    - [Daisy Chain and Attestation](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#daisy-chain-and-attestation)
- [SDK](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#main-content)

    - [Core Functions](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#core-functions)
    - [SandGrain SDK](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#sandgrain-sdk)

[![SandGrain\_Logo\_RGB\_white-bijgesneden (1)-1](https://portal.sandgrain.eu/hs-fs/hubfs/SandGrain_Logo_RGB_white-bijgesneden%20(1)-1.png?width=427&height=83&name=SandGrain_Logo_RGB_white-bijgesneden%20(1)-1.png "SandGrain_Logo_RGB_white-bijgesneden (1)-1")](https://portal.sandgrain.eu/?hsLang=en)

<https://www.facebook.com/> <https://www.twitter.com/> <https://www.instagram.com/> <https://podcasts.apple.com/> [mailto:email@email.com](mailto:email@email.com)

Copyright © 2026, sandgrain.eu