in the course of boot, a PCR from the vTPM is extended With all the root of the Merkle tree, and later confirmed with the KMS before releasing the HPKE non-public crucial. All subsequent reads from the basis partition are checked against the Merkle tree. This makes certain that all the contents of the basis partition are attested and any attempt to