through boot, a PCR in the vTPM is prolonged While using the root of this Merkle tree, and later on confirmed through the KMS right before releasing the HPKE private important. All subsequent reads within the root https://no-ransom-6dmd.vercel.app/