Abstract: Example solutions for performing attestation for a confidential virtual machine (CVM) provision a confidential virtual machine within a virtualization platform. The virtualization platform includes confidential computing hardware configured to support encryption services to data while that data is in use on the CVM. A third party with administrative rights is provided to the CVM. The administrative rights allow the third party to modify a configuration of the CVM. After the administrative rights of the third party are removed from the CVM, a measurement is received from the CVM. The measurement is added to a build attestation report for the CVM. The attestation report is transmitted to a primary administrative party of the CVM. Using the confidential computing hardware, the CVM enters operational service with confidential data upon receiving certification user input from the primary administrative party who has reviewed the attestation report.