all through boot, a PCR of your vTPM is extended Using the root of this Merkle tree, and later on confirmed from the KMS just before releasing the HPKE non-public crucial. All subsequent reads from the foundation https://honeypotz.net