The invention relates to a method for remote attestation. In the method is created a first asymmetric key pair (302) in a trusted platform module in an electronic device. A first public key and software platform state information are certified (306) with an attestation identity key associated with the trusted platform module to produce a first certificate. A second asymmetric key pair is produced (308) in an application within the electronic device. The second public key is certified (310) with said first secret key to produce a second certificate. A message is signed (316) with the second secret key to provide a message signature in the first electronic device. The message and the message signature, software platform state information, the first certificate and the second certificate are sent (318) to a second electronic device.