1. A method for updating code in an executing environment comprising: installing new code; measuring an identifying characteristic of the new code and making it available to an attestation system; notifying the attestation system that code has been updated to a new version whereby, when the attestation system finds that the identifying characteristic of the new code does not match a pre-stored attestation value it is aware that a legitimate mis-match could have occurred.