Identifying the device interacting with cloud services can significantly enhance the overall level of trust we can achieve. The work that follows is part of a wider project whose goal is precisely this, looking at device authentication and attestation by leveraging Trusted Computing Group (TCG) standards for issuing OEM certified lifetime device identities (IDevIDs) and enabling a range of application specific device based identities (LDevIDs). One area of particular interest is in being able to demonstrate the authenticity and integrity of telemetry and control data, which means assuring that it comes from the correct device and that it has not been tampered with.