through boot, a PCR with the vTPM is extended Using the root of the Merkle tree, and later on verified via the KMS just before releasing the HPKE non-public key. All subsequent reads through the root partition are https://noransomattack.com