A system for determining whether a trust command is permitted to be performed, the system comprising: one or more processors; and one or more computer-readable storage media storing computer-executable instructions that, responsive to execution by the one or more processors, cause the system to perform operations including: ascertaining that a trust command is to be performed for a client device not having a local trusted platform module; formatting a command request for the trust command, including generating a command signature based at least on a device key for the client device , a device value , and command parameters for the trust command, at least one of the device key or the device value reflecting state information for the client device , wherein said formatting further comprises: while a boot process of the client device is being performed, collecting a measurement of a code component of the client device and extending the device key with the measurement prior to generating the command signature; communicating the command request for receipt by a remote trust service providing trusted platform module functionality to the client device ; and receiving a response to the command request that indicates whether the command request is allowed. one or more processors; and one or more computer-readable storage media storing computer-executable instructions that, responsive to execution by the one or more processors, cause the system to perform operations including: ascertaining that a trust command is to be performed for a client device not having a local trusted platform module; formatting a command request for the trust command, including generating a command signature based at least on a device key for the client device , a device value , and command parameters for the trust command, at least one of the device key or the device value reflecting state information for the client device , wherein said formatting further comprises: while a boot process of the client device is being performed, collecting a measurement of a code component of the client device and extending the device key with the measurement prior to generating the command signature; communicating the command request for receipt by a remote trust service providing trusted platform module functionality to the client device ; and receiving a response to the command request that indicates whether the command request is allowed. ascertaining that a trust command is to be performed for a client device not having a local trusted platform module; formatting a command request for the trust command, including generating a command signature based at least on a device key for the client device , a device value , and command parameters for the trust command, at least one of the device key or the device value reflecting state information for the client device , wherein said formatting further comprises: while a boot process of the client device is being performed, collecting a measurement of a code component of the client device and extending the device key with the measurement prior to generating the command signature; communicating the command request for receipt by a remote trust service providing trusted platform module functionality to the client device ; and receiving a response to the command request that indicates whether the command request is allowed. <EOS>