We introduce a manufacturer server and a bank server that closely work together.Those servers will be used by the ATMs to periodically attest their system state to—allowing the manufacturer to check the current integrity of an ATM and allowing the bank to put a compromised ATM out of operation remotely.