all through boot, a PCR of your vTPM is extended Together with the root of this Merkle tree, and later confirmed by the KMS just before releasing the HPKE non-public essential. All subsequent reads from the root https://no-ransom-6dmd.vercel.app