A system for determining whether a trust command is permitted to be performed, the system comprising: one or more processors; and one or more computer-readable storage media storing computer-executable instructions that, responsive to execution by the one or more processors, cause the system to perform operations including: ascertaining that a trust command is to be performed for a client device not having a local trusted platform module; formatting a command request for the trust command, including generating a command signature based at least on a device key for the client device, a device value, and command parameters for the trust command, at least one of the device key or the device value reflecting state information for the client device, wherein said formatting further comprises: while a boot process of the client device is being performed, collecting a measurement of a code component of the client device and extending the device key with the measurement prior to generating the command signature; communicating the command request for receipt by a remote trust service providing trusted platform module functionality to the client device; and receiving a response to the command request that indicates whether the command request is allowed. one or more processors; and one or more computer-readable storage media storing computer-executable instructions that, responsive to execution by the one or more processors, cause the system to perform operations including: ascertaining that a trust command is to be performed for a client device not having a local trusted platform module; formatting a command request for the trust command, including generating a command signature based at least on a device key for the client device, a device value, and command parameters for the trust command, at least one of the device key or the device value reflecting state information for the client device, wherein said formatting further comprises: while a boot process of the client device is being performed, collecting a measurement of a code component of the client device and extending the device key with the measurement prior to generating the command signature; communicating the command request for receipt by a remote trust service providing trusted platform module functionality to the client device; and receiving a response to the command request that indicates whether the command request is allowed. ascertaining that a trust command is to be performed for a client device not having a local trusted platform module; formatting a command request for the trust command, including generating a command signature based at least on a device key for the client device, a device value, and command parameters for the trust command, at least one of the device key or the device value reflecting state information for the client device, wherein said formatting further comprises: while a boot process of the client device is being performed, collecting a measurement of a code component of the client device and extending the device key with the measurement prior to generating the command signature; communicating the command request for receipt by a remote trust service providing trusted platform module functionality to the client device; and receiving a response to the command request that indicates whether the command request is allowed.