The invention discloses a configuration updating method, device and system. The method comprises the following steps: obtaining first data according to a random number and an algorithm ID, and transmitting the first data to a server; receiving second data returned by the server and a signature value corresponding to the second data, wherein the second data are data obtained in a way of encrypting a configuration file by the random number and the algorithm ID; and performing attestation on the signature value, and decrypting the second data by the random number and the algorithm ID under the situation of attestation success in order to obtain a configuration file. Through adoption of the configuration updating method, device and system, the technical problem of inaccurate configuration items obtained by a client due to possible modification of newer configuration of the server by a third-party program during configuration updating of a user in the prior art is solved.