Today, enterprises and large organizations face significant challenges in securing their client fleets, especially as cyber threats grow and become more sophisticated. In addition to user authentication, it is useful for the enterprise to identify the device being enrolled, used and its trust status (i.e. how it is managed). For example, an enterprise will often want to differentiate between domain managed devices and BYOD (Bring your own device) systems and the more restricted secure systems for sensitive operations. Device identities provide a mechanism to build this trust. These device identities need to be tied to the hardware platform such that the enterprise knows the device accessing cloud and network resources.