---
title: Host Daisy Chain Authentication
description: SandGrain SGA Breakout Board v1 – Overview
---

[Skip to content](https://portal.sandgrain.eu/knowledge-base/user-doc/host-daisy-chain-authentication#main-content)

English

Show submenu for translations

![SandGrain\_Logo\_RGB\_white-bijgesneden (1)](https://portal.sandgrain.eu/hs-fs/hubfs/SandGrain_Logo_RGB_white-bijgesneden%20(1).png?width=427&height=83&name=SandGrain_Logo_RGB_white-bijgesneden%20(1).png)

Open main navigation

Close main navigation

- English
  
  Show submenu for translations
- [Contact us](https://portal.sandgrain.eu/login)

[Contact us](https://portal.sandgrain.eu/login?hsLang=en)

 How can we help you?

- There are no suggestions because the search field is empty.

1. [Knowledge Base](https://portal.sandgrain.eu/knowledge-base?hsLang=en)
2. [User Documentation](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en)
3. [Daisy Chain](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#daisy-chain)

October 6, 2026

# Host Daisy Chain Authentication

Host Daisy Chain Authentication verifies that the system interacting with the device is trusted. This step complements token-level authentication to ensure that both ends of the interaction are secure.

### **Why it matters:**

- Protects sensitive devices from interacting with untrusted hosts.
- Establishes a secure environment for subsequent Secure Boot verification.

### **How it works:**

1. Request host authentication from the system.
2. Monitor status until host verification completes successfully (`AUTH_OK`).
3. Proceed with operations only after successful host authentication.

### **Prerequisites**

- User must be authenticated and authorized.
- Valid `CF-Access-Client-ID` and `CF-Access-Client-Secret` are required.
- Devices must be ordered correctly in the chain.
- Host must generate:
  
    - **HCW** → Host Challenge Word
    - **HRW** → Host Response Word

![Host Daisy Chain Authentication](https://portal.sandgrain.eu/hs-fs/hubfs/Host%20Daisy%20Chain%20Authentication.gif?width=670&height=377&name=Host%20Daisy%20Chain%20Authentication.gif)

### **End-to-End Flow**

1. Host generates **HCW**
2. Host computes **HRW**
3. Client submits Host Daisy Chain Authentication request
4. Service returns `transactionId`
5. Client polls status API until final result

| [← Token Daisy Chain Authentication](https://portal.sandgrain.eu/knowledge-base/user-doc/token-daisy-chain-authentication?hsLang=en) | [Daisy Chain Host Response Word (HRW) →](https://portal.sandgrain.eu/knowledge-base/user-doc/daisy-chain-host-response-word-hrw?hsLang=en) |
| --- | --- |

 

- [User Documentation](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#main-content)

    - [Quick Starter Guide](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#quick-starter-guide)
    - [User Manual](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#user-manual)
    - [Whitepaper](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#whitepaper)
    - [Token Leaflet](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#token-leaflet)
    - [Claim Token Procedure](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#claim-token-procedure)
    - [Daisy Chain](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#daisy-chain)
    - [Release Note](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#release-note)
    - [Naming Convention](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#naming-convention)
    - [SandGrain SDK](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#sandgrain-sdk)
    - [TrustBridge](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#trustbridge)
- [API Documentation](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#main-content)

    - [Device API Integration](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#device-api-integration)
    - [Daisy Chain and Attestation](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#daisy-chain-and-attestation)
- [SDK](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#main-content)

    - [Core Functions](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#core-functions)
    - [SandGrain SDK](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#sandgrain-sdk)

[![SandGrain\_Logo\_RGB\_white-bijgesneden (1)-1](https://portal.sandgrain.eu/hs-fs/hubfs/SandGrain_Logo_RGB_white-bijgesneden%20(1)-1.png?width=427&height=83&name=SandGrain_Logo_RGB_white-bijgesneden%20(1)-1.png "SandGrain_Logo_RGB_white-bijgesneden (1)-1")](https://portal.sandgrain.eu/?hsLang=en)

<https://www.facebook.com/> <https://www.twitter.com/> <https://www.instagram.com/> <https://podcasts.apple.com/> [mailto:email@email.com](mailto:email@email.com)

Copyright © 2026, sandgrain.eu