Device attestation

POST Obtain a nonce to attest a device with

POST /device/attestation/nonce

The handset signs the returned nonce with the private key whose public half it registered when the device was linked, and presents the signature on the next transaction. The nonce is single-use and short-lived, which is what stops a captured signature being replayed. Attestation proves possession of the registered device key; it does not prove the operating system is uncompromised, which only a platform integrity verifier can establish.

Headers

Example

Response: GenericResponseAttestationNonce

curl -X POST "https://api.bridgemoni.com/device/attestation/nonce" \
  -H "Authorization: Bearer $BRIDGEMONI_TOKEN" \
  -H "X-Tenant: $BRIDGEMONI_TENANT" \
  -H "X-Environment: $BRIDGEMONI_ENV"

{
  "data": {
    "nonce": "string",
    "deviceReference": "b3f1c2d4-5e6a-4b7c-8d9e-0f1a2b3c4d5e"
  },
  "description": "Attestation nonce issued successfully"
}

Responses