Integrated trust platform modules, device attestation, and device management for live zero trust network access

A non-transitory machine readable storage medium comprising machine readable instructions that, when executed by at least one processor, cause the at least one processor to:

• obtain a request to access an organization resource and a client certificate including a device identifier and a certificate authority issuer;
• determine that the certificate authority issuer is a trusted issuer;
• compare the device identifier against device identifiers in a database storing trusted device identifiers of an organization protecting the organization resource;
• in response to determining that an instance of the device identifier exists in the database, determine that a client device associated with the device identifier is authorized to access the organization resource based on checking a policy of the organization;
• and
• grant the client device access to the organization resource.

A computer-implemented method comprising:

• obtaining a request to access an organization resource and a client certificate including a device identifier and a certificate authority issuer;
• determining that the certificate authority issuer is a trusted issuer;
• comparing the device identifier against device identifiers in a database storing trusted device identifiers of an organization protecting the organization resource;
• in response to determining that an instance of the device identifier exists in the database, determining that a client device associated with the device identifier is authorized to access the organization resource based on checking a policy of the organization;
• and
• granting the client device access to the organization resource.