diff --git a/testtool/config.go b/testtool/config.go
index 70184031..a1dbced2 100644
--- a/testtool/config.go
+++ b/testtool/config.go
@@ -129,7 +129,8 @@ func getConfig() *config {
 	api := flag.String(apiFlag, "", fmt.Sprintf("APIs for cmcd. Possible: %v", maps.Keys(apis)))
 	network := flag.String(networkFlag, "", "Network for socket API [unix tcp]")
 	mtls := flag.Bool(mtlsFlag, false, "Performs mutual TLS")
-	attest := flag.String(attestFlag, "mutual", "Peforms performs remote attestation: mutual, server only, or client only [mutual, server, client]")
+	attest := flag.String(attestFlag, "", "Peforms performs remote attestation: mutual, server only,"+
+		"client only, or none [mutual, server, client, none]")
 	logLevel := flag.String(logFlag, "",
 		fmt.Sprintf("Possible logging: %v", maps.Keys(logLevels)))
 	publish := flag.String(publishFlag, "", "HTTP address to publish attestation results to")
diff --git a/testtool/internal.go b/testtool/internal.go
index ce1b9bc3..32c5546b 100644
--- a/testtool/internal.go
+++ b/testtool/internal.go
@@ -51,6 +51,7 @@ func dialInternalAddr(c *config, api atls.CmcApiSelect, addr string, tlsConf *tl
 		atls.WithCmcPolicies(c.policies),
 		atls.WithCmcApi(api),
 		atls.WithMtls(c.Mtls),
+		atls.WithAttest(c.Attest),
 		atls.WithCmcNetwork(c.Network),
 		atls.WithResult(verificationResult),
 		atls.WithCmc(cmc))
@@ -227,6 +228,7 @@ func listenInternal(c *config, api atls.CmcApiSelect, cmc *cmc.Cmc) {
 		atls.WithCmcPolicies(c.policies),
 		atls.WithCmcApi(api),
 		atls.WithMtls(c.Mtls),
+		atls.WithAttest(c.Attest),
 		atls.WithCmcNetwork(c.Network),
 		atls.WithResult(verificationResult),
 		atls.WithCmc(cmc))