A secure server, comprising: a processor configured to generate a server component log measuring a state of an operating system component of the secure server during a boot operation and recording the state of an operating system component; and a communication interface configured to: send at least a public key of a trusted credential and the server component log to an attestation service having a record of the state of each operating system component of the secure server, and receive a signed trusted credential from the attestation service if the attestation service finds that the server component log matches the records of the attestation service, the signed trusted credential validating the secure server as trustworthy to a client device seeking access to the secure server, wherein the signed trusted credential includes at least the public key signed by the attestation service; and a server secure module configured to protect the signed trusted credential by preventing access to the signed trusted credential based on the state of the operating system component, wherein the secure server is configured to: receive an access request from a client device, sign with the signed trusted credential an access response responding to the access request, and send the signed access response to the client device, the access response including the public key of the signed trusted credential, enabling the client device to validate the secure server, establish a trusted session with the client device using the signed trusted credential, and execute a proximity challenge with the client device upon establishing the trusted session, wherein the proximity challenge is a validation executed between the client device and the secure server at close proximity. a processor configured to generate a server component log measuring a state of an operating system component of the secure server during a boot operation and recording the state of an operating system component; and a communication interface configured to: send at least a public key of a trusted credential and the server component log to an attestation service having a record of the state of each operating system component of the secure server, and receive a signed trusted credential from the attestation service if the attestation service finds that the server component log matches the records of the attestation service, the signed trusted credential validating the secure server as trustworthy to a client device seeking access to the secure server, wherein the signed trusted credential includes at least the public key signed by the attestation service; and send at least a public key of a trusted credential and the server component log to an attestation service having a record of the state of each operating system component of the secure server, and receive a signed trusted credential from the attestation service if the attestation service finds that the server component log matches the records of the attestation service, the signed trusted credential validating the secure server as trustworthy to a client device seeking access to the secure server, wherein the signed trusted credential includes at least the public key signed by the attestation service; and a server secure module configured to protect the signed trusted credential by preventing access to the signed trusted credential based on the state of the operating system component, wherein the secure server is configured to: receive an access request from a client device, sign with the signed trusted credential an access response responding to the access request, and send the signed access response to the client device, the access response including the public key of the signed trusted credential, enabling the client device to validate the secure server, establish a trusted session with the client device using the signed trusted credential, and execute a proximity challenge with the client device upon establishing the trusted session, wherein the proximity challenge is a validation executed between the client device and the secure server at close proximity. receive an access request from a client device, sign with the signed trusted credential an access response responding to the access request, and send the signed access response to the client device, the access response including the public key of the signed trusted credential, enabling the client device to validate the secure server, establish a trusted session with the client device using the signed trusted credential, and execute a proximity challenge with the client device upon establishing the trusted session, wherein the proximity challenge is a validation executed between the client device and the secure server at close proximity.