AppAttest assertion fails if user OS is updated

I have observed few users if their OS upgrades than the DeviceCheck generateAssertion API fails. Is it expected that we need to attest/register new key id iOS version is updated ?

AppAttest assertion fails if user OS is updated
 
 
Q