through boot, a PCR with the vTPM is extended With all the root of the Merkle tree, and later verified by the KMS just before releasing the HPKE non-public critical. All subsequent reads from your root partition are https://honeypotz.net