Enable Device Health Attestation Monitoring and Reporting
- Policy ID
- OptIntoDSHA_Name
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2016, Windows 10 Version 1709
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- System › Device Health Attestation Service
Description
This group policy enables Device Health Attestation reporting (DHA-report) on supported devices. It enables supported devices to send Device Health Attestation related information (device boot logs, PCR values, TPM certificate, etc.) to Device Health Attestation Service (DHA-Service) every time a device starts. Device Health Attestation Service validates the security state and health of the devices, and makes the findings accessible to enterprise administrators via a cloud based reporting portal. This policy is independent of DHA reports that are initiated by device manageability solutions (like MDM or SCCM), and will not interfere with their workflows.
Registry
ComputerHKEY_LOCAL_MACHINE
- EnableDeviceHealthAttestationServiceREG_DWORD