throughout boot, a PCR in the vTPM is prolonged Together with the root of the Merkle tree, and later confirmed because of the KMS just before releasing the HPKE non-public key. All subsequent reads through the root https://no-ransom-6dmd.vercel.app/