for the duration of boot, a PCR from the vTPM is extended Together with the root of this Merkle tree, and afterwards confirmed with the KMS right before releasing the HPKE non-public crucial. All subsequent reads from https://myeasybookmarks.com/story3723986/how-much-you-need-to-expect-you-ll-pay-for-a-good-confidential-aalen