for the duration of boot, a PCR of your vTPM is extended With all the root of the Merkle tree, and later verified by the KMS right before releasing the HPKE private critical. All subsequent reads from the root partition https://one.aistudio.ml