A system to attest a virtual trusted platform module , the system comprising: memory ; one or more processors coupled to the memory; and a guest attestation service implemented using at least one of the one or more processors to attest a virtual machine that is hosted by a host operating system configured to run on a host , the guest attestation service configured to: receive a guest endorsement key certificate and guest measurements from the virtual trusted platform module via the virtual machine, the guest endorsement key certificate including a guest endorsement key associated with the virtual trusted platform module that is hosted by the host operating system, the guest endorsement key certificate vouching for the guest measurements, the guest measurements indicating attributes of a guest operating system configured to run on the virtual machine; determine whether the guest endorsement key certificate is issued via a chain of trust that includes a host attestation service that is configured to attest the host; generate a verification indicating that the guest measurements are trustworthy based at least in part on a determination that the guest endorsement key certificate is issued via the chain of trust that includes the host attestation service; and provide the verification to the virtual machine. memory ; one or more processors coupled to the memory; and a guest attestation service implemented using at least one of the one or more processors to attest a virtual machine that is hosted by a host operating system configured to run on a host , the guest attestation service configured to: receive a guest endorsement key certificate and guest measurements from the virtual trusted platform module via the virtual machine, the guest endorsement key certificate including a guest endorsement key associated with the virtual trusted platform module that is hosted by the host operating system, the guest endorsement key certificate vouching for the guest measurements, the guest measurements indicating attributes of a guest operating system configured to run on the virtual machine; receive a guest endorsement key certificate and guest measurements from the virtual trusted platform module via the virtual machine, the guest endorsement key certificate including a guest endorsement key associated with the virtual trusted platform module that is hosted by the host operating system, the guest endorsement key certificate vouching for the guest measurements, the guest measurements indicating attributes of a guest operating system configured to run on the virtual machine; the guest endorsement key certificate including a guest endorsement key associated with the virtual trusted platform module that is hosted by the host operating system, the guest endorsement key certificate vouching for the guest measurements, the guest measurements indicating attributes of a guest operating system configured to run on the virtual machine; determine whether the guest endorsement key certificate is issued via a chain of trust that includes a host attestation service that is configured to attest the host; generate a verification indicating that the guest measurements are trustworthy based at least in part on a determination that the guest endorsement key certificate is issued via the chain of trust that includes the host attestation service; and provide the verification to the virtual machine. <EOS>