Minimal attestation-based enrollment flow.

components/policy/proto/device_management_backend.proto

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 syntax = "proto2";
 
 option optimize_for = LITE_RUNTIME;
 
 package enterprise_management;
 
@@ skipping 61 matching lines @@
     FLAVOR_ENROLLMENT_SERVER_FORCED = 4;
     // Device state downloaded from the server during OOBE indicates that the
     // device should prompt for (re-)enrollment, but the user is allowed to
     // skip.
     FLAVOR_ENROLLMENT_SERVER_ADVERTISED = 5;
     // Device detected in steady state that it is supposed to be enrolled, but
     // the policy is missing.
     FLAVOR_ENROLLMENT_RECOVERY = 6;
     // User policy registration for a logged-in user.
     FLAVOR_USER_REGISTRATION = 7;
+    // Attestation-based with the option to use a different authentication
+    // mechanism.
+    FLAVOR_ENROLLMENT_ATTESTATION = 8;
+    // Attestation-based enrollment.
+    FLAVOR_ENROLLMENT_ATTESTATION_FORCED = 9;
   };
 
   // Indicates the registration flavor. This is passed to the server FYI when
   // registering for policy so the server can distinguish registration triggers.
   optional Flavor flavor = 8;
 }
 
 // Response from server to device register request.
 message DeviceRegisterResponse {
   // Device management token for this registration.  This token MUST be
@@ skipping 1158 matching lines @@
   // Response to update device attribute.
   optional DeviceAttributeUpdateResponse device_attribute_update_response = 16;
 
   // Response to GCM id update request.
   optional GcmIdUpdateResponse gcm_id_update_response = 17;
 
   // Response to check Android management request.
   optional CheckAndroidManagementResponse
       check_android_management_response = 18;
 }