What is Device Trust?

Device trust is the level of confidence assigned to a device based on available identity, authentication, security, management, and compliance signals when making or reassessing an access decision. Rather than relying on a single identifier or security check, a device trust decision may evaluate available factors such as device identity, authentication credentials, security posture, management status, and policy compliance.

Device-related identity, authentication, and posture signals are important inputs in Zero Trust architectures, where access decisions may consider the user, device, requested resource, and other contextual information.

How is it established?

Organizations evaluate available security and management signals against predefined policies to determine whether a device satisfies access requirements. Depending on the environment and technology in use, these signals may include:

• Device identity and enrollment status
• Device posture and compliance
• Operating system version and security patch level
• Device encryption status
• Authentication using certificates or cryptographic credentials
• Root or jailbreak detection
• Endpoint management status

It is not permanent. It may be reassessed when access is requested, when relevant device changes are detected, or at configured intervals.

Device trust vs. device identity

Device identity establishes which device is requesting access, while device trust provides information that a policy engine can use alongside other contextual signals when determining whether access should be granted.

Why is it important?

Organizations cannot assume that every authenticated or enrolled device is secure. A managed device may become non-compliant because of missing security patches, disabled encryption, prohibited configuration changes, or detected threats covered by organizational compliance policies.

Evaluating device trust helps organizations:

• Support Zero Trust access decisions.
• Identify compromised, non-compliant, or misconfigured endpoints that may require access restrictions or remediation.
• Improve visibility into endpoint security.
• Apply security policies consistently across managed devices.
• Strengthen risk-based access decisions.

Device trust decisions may be reassessed as relevant device conditions change or at configured points during the access lifecycle.

How Hexnode supports device trust

Device trust decisions depend on sufficiently current endpoint information and appropriate access policies. Hexnode UEM supports device enrollment, compliance monitoring, policy enforcement, and endpoint lifecycle management, with available capabilities varying by platform, device type, configuration, and subscription edition.

When Hexnode UEM and Hexnode IdP are used together, supported device posture signals can be evaluated alongside user identity for policy-driven access decisions. Hexnode UEM provides centralized visibility across supported endpoint platforms, while Hexnode IdP uses supported identity and device posture signals in identity-aware access workflows.