throughout boot, a PCR from the vTPM is prolonged With all the root of the Merkle tree, and later verified via the KMS before releasing the HPKE private crucial. All subsequent reads from the root partition are checked from the Merkle tree. This makes certain that all the contents of the basis pa