A method for trusted measurement of a cloud computing platform including a computing node and a trusted platform, comprising: a) receiving , by a third-party management and audit system, a registration request, from the cloud computing platform, including a digital certificate of the cloud computing platform and a digital certificate of the trusted platform during a registration process; b) sending , by the third-party management and audit system, the digital certificates to a certification authority, CA, to verify validity of the digital certificates; c) sending , by the trusted platform, a correspondence between a user identifier and a virtual machine identifier to the third-party management and audit system; and d) sending , by the computing node, a current running indicator of software on the cloud computing platform and information about a running version of the software to the trusted platform; e) receiving , by the third-party management and audit system, the current running indicator of the software on the cloud computing platform, measurement information of the software and carried virtual machine identifier information from the trusted platform, wherein the current running indicator of the software is signed by the trusted platform of the cloud computing platform by using a digital certificate issued by the CA; f) obtaining , by the third-party management and audit system, a running security indicator of the software and information about an assessment version of the software from a third-party assessment organization; and g) generating , by the third-party management and audit system, an audit report based on the current running indicator, signed by using the digital certificate issued by the CA, of the software, the running security indicator of the software, the information about the running version of the software, and the information about the assessment version of the software, wherein the audit report is used to indicate trustworthiness of the cloud computing platform. a) receiving , by a third-party management and audit system, a registration request, from the cloud computing platform, including a digital certificate of the cloud computing platform and a digital certificate of the trusted platform during a registration process; b) sending , by the third-party management and audit system, the digital certificates to a certification authority, CA, to verify validity of the digital certificates; c) sending , by the trusted platform, a correspondence between a user identifier and a virtual machine identifier to the third-party management and audit system; and d) sending , by the computing node, a current running indicator of software on the cloud computing platform and information about a running version of the software to the trusted platform; e) receiving , by the third-party management and audit system, the current running indicator of the software on the cloud computing platform, measurement information of the software and carried virtual machine identifier information from the trusted platform, wherein the current running indicator of the software is signed by the trusted platform of the cloud computing platform by using a digital certificate issued by the CA; f) obtaining , by the third-party management and audit system, a running security indicator of the software and information about an assessment version of the software from a third-party assessment organization; and g) generating , by the third-party management and audit system, an audit report based on the current running indicator, signed by using the digital certificate issued by the CA, of the software, the running security indicator of the software, the information about the running version of the software, and the information about the assessment version of the software, wherein the audit report is used to indicate trustworthiness of the cloud computing platform. <EOS>