Common difficulties in remote attestation practice include: measurements changing frequently with code versions, which makes whitelist maintenance costly; certificate expiration and root certificate updates; the fragmentation of root trust across multiple vendors; and the attestation service itself becoming a single point of dependency.