A method for providing an attestation for enabling a device to attest to an assertion concerning the device and for a validation apparatus to validate the attestation from the device attesting to the assertion concerning the device, comprising: generating an attestation identifier and a device-secret code corresponding to the attestation identifier; providing the attestation identifier and a validation-secret code to an attestation database for storage in conjunction with the assertion, wherein the validation-secret code is generated prior to the provision of the validation-secret code by hashing the device-secret code using a first predetermined hash function on the device-secret code, wherein the device-secret code is not provided to the validation apparatus and wherein the device-secret code is not provided to the attestation database; providing the attestation identifier and the device-secret code to a manufacturer or adapter; providing, by the manufacturer or adapter, the attestation identifier and the device-secret code to the device; obtaining, by the validation apparatus from the attestation database, one or more entries, each entry comprising the attestation identifier, the validation-secret code and the assertion, wherein the validation apparatus does not obtain any device-secret codes; obtaining, by the validation apparatus from the device, one or more attestation identifiers and a hashed-value, wherein prior to the obtaining from the device, the device has generated one or more validation-secret codes, each validation-secret code has been generated by the device by hashing a device-secret code using a first predetermined hash function, and wherein the hashed-value has been generated by the device hashing the one or more validation-secret codes using a second predetermined hash function; performing, by the validation apparatus, a validation operation on the one or more attestation identifiers obtained from the device together with the corresponding validation-secret codes obtained from the attestation database using the second predetermined hash function to validate the hashed-value obtained from the device; determining, by the validation apparatus, whether the one or more assertions associated with the one or more attestation identifiers obtained from the device are valid in respect of the device in dependence on a validation result of the validation operation. generating an attestation identifier and a device-secret code corresponding to the attestation identifier; providing the attestation identifier and a validation-secret code to an attestation database for storage in conjunction with the assertion, wherein the validation-secret code is generated prior to the provision of the validation-secret code by hashing the device-secret code using a first predetermined hash function on the device-secret code, wherein the device-secret code is not provided to the validation apparatus and wherein the device-secret code is not provided to the attestation database; providing the attestation identifier and the device-secret code to a manufacturer or adapter; providing, by the manufacturer or adapter, the attestation identifier and the device-secret code to the device; obtaining, by the validation apparatus from the attestation database, one or more entries, each entry comprising the attestation identifier, the validation-secret code and the assertion, wherein the validation apparatus does not obtain any device-secret codes; obtaining, by the validation apparatus from the device, one or more attestation identifiers and a hashed-value, wherein prior to the obtaining from the device, the device has generated one or more validation-secret codes, each validation-secret code has been generated by the device by hashing a device-secret code using a first predetermined hash function, and wherein the hashed-value has been generated by the device hashing the one or more validation-secret codes using a second predetermined hash function; performing, by the validation apparatus, a validation operation on the one or more attestation identifiers obtained from the device together with the corresponding validation-secret codes obtained from the attestation database using the second predetermined hash function to validate the hashed-value obtained from the device; determining, by the validation apparatus, whether the one or more assertions associated with the one or more attestation identifiers obtained from the device are valid in respect of the device in dependence on a validation result of the validation operation.