A computing system for verifying that a virtual machine has booted into a known configuration, the computing system comprising: at least one computing device; and at least one memory in communication with the at least one computing device, the at least one memory having stored thereon computer readable instructions that, when executed by the computing system, cause the computing system to at least: receive a request for a virtual machine instance; in response to receiving the request for the virtual machine instance, instantiating the requested virtual machine instance, wherein instantiating the requested virtual machine instance includes loading operating system software or data; auditing the virtual machine instance to generate a record of the loaded operating system software or data; computing a configuration integrity verifier based on the record of loaded operating system software or data and a configuration for the virtual machine instance; and in response to a request for verification of the operating system software or data, providing the configuration integrity verifier, information regarding the audited instantiated virtual machine instance, and the record of loaded operating system software or data as a trusted third party verification that the operating system software or data were used to instantiate the virtual machine instance . at least one computing device; and at least one memory in communication with the at least one computing device, the at least one memory having stored thereon computer readable instructions that, when executed by the computing system, cause the computing system to at least: receive a request for a virtual machine instance; in response to receiving the request for the virtual machine instance, instantiating the requested virtual machine instance, wherein instantiating the requested virtual machine instance includes loading operating system software or data; auditing the virtual machine instance to generate a record of the loaded operating system software or data; computing a configuration integrity verifier based on the record of loaded operating system software or data and a configuration for the virtual machine instance; and in response to a request for verification of the operating system software or data, providing the configuration integrity verifier, information regarding the audited instantiated virtual machine instance, and the record of loaded operating system software or data as a trusted third party verification that the operating system software or data were used to instantiate the virtual machine instance . receive a request for a virtual machine instance; in response to receiving the request for the virtual machine instance, instantiating the requested virtual machine instance, wherein instantiating the requested virtual machine instance includes loading operating system software or data; auditing the virtual machine instance to generate a record of the loaded operating system software or data; computing a configuration integrity verifier based on the record of loaded operating system software or data and a configuration for the virtual machine instance; and in response to a request for verification of the operating system software or data, providing the configuration integrity verifier, information regarding the audited instantiated virtual machine instance, and the record of loaded operating system software or data as a trusted third party verification that the operating system software or data were used to instantiate the virtual machine instance . <EOS>