diff --git a/feature/tpm/attestation.go b/feature/tpm/attestation.go
index 4b3018569..92617f995 100644
--- a/feature/tpm/attestation.go
+++ b/feature/tpm/attestation.go
@@ -262,3 +262,5 @@ func (ak *attestationKey) Clone() key.HardwareAttestationKey {
 		pub:        ak.pub,
 	}
 }
+
+func (ak *attestationKey) IsZero() bool { return !ak.loaded() }
diff --git a/types/key/hardware_attestation.go b/types/key/hardware_attestation.go
index ac3914ab2..9d4a21ee4 100644
--- a/types/key/hardware_attestation.go
+++ b/types/key/hardware_attestation.go
@@ -32,6 +32,7 @@ type HardwareAttestationKey interface {
 	json.Unmarshaler
 	io.Closer
 	Clone() HardwareAttestationKey
+	IsZero() bool
 }
 
 // HardwareAttestationPublicFromPlatformKey creates a HardwareAttestationPublic