MDM_HealthAttestation class

The MDM_HealthAttestation class enables enterprise IT managers to assess the health of managed devices and take enterprise policy actions.

The following is a list of functions performed by the HealthAttestation CSP:

• Collects data that is used in verifying a devices health states
• Forwards the data to the Health Attestation Service (HAS)
• Provisions the Health Attestation Certificate that it receives from HAS
• Upon request, forwards the Health Attestation Certificate (received from HAS) and related runtime information to the MDM Server for verification

The following syntax is simplified from MOF code and includes all inherited properties.

Syntax

[InPartition("local-system"), dynamic, provider("DMWmiBridgeProv")]
class MDM_HealthAttestation
{
  string  InstanceID;
  string  ParentID;
  sint32  Status;
  boolean ForceRetrieve;
  string  Certificate;
  string  Nonce;
  string  CorrelationID;
  sint32  TpmReadyStatus;
  sint32  MaxSupportedProtocolVersion;
  sint32  PreferredMaxProtocolVersion;
  sint32  CurrentProtocolVersion;
  string  HASEndpoint;
};

Members

The MDM_HealthAttestation class has these types of members:

• Methods
• Properties

Methods

The MDM_HealthAttestation class has these methods.

Method	Description
VerifyHealthMethod	Method to notify the device to prepare a health certificate verification request.

Properties

The MDM_HealthAttestation class has these properties.

Certificate

Data type: string

Access type: Read/write

Qualifiers: Octetstring

CorrelationID

Data type: string

Access type: Read/write

CurrentProtocolVersion

Data type: sint32

Access type: Read/write

TBD

ForceRetrieve

Data type: boolean

Access type: Read/write

HASEndpoint

Data type: string

Access type: Read/write

InstanceID

Data type: string

Access type: Read-only

Qualifiers: key

Identifies the name of the parent node. For this class, the string is "HealthAttestation".

MaxSupportedProtocolVersion

Data type: sint32

Access type: Read/write

TBD

Nonce

Data type: string

Access type: Read/write

ParentID

Data type: string

Access type: Read-only

Qualifiers: key

Describes the full path to the parent node. For this class, the string is "./Vendor/MSFT/"

PreferredMaxProtocolVersion

Data type: sint32

Access type: Read/write

TBD

Status

Data type: sint32

Access type: Read/write

TpmReadyStatus

Data type: sint32

Access type: Read/write

Requirements

Requirement	Value
Minimum supported client	Windows 10 [desktop apps only]
Minimum supported server	None supported
Namespace	Root\cimv2\mdm\dmmap
MOF	DMWmiBridgeProv.mof
DLL	DMWmiBridgeProv.dll

See also

Using PowerShell scripting with the WMI Bridge Provider