through boot, a PCR on the vTPM is prolonged Using the root of this Merkle tree, and afterwards confirmed from the KMS just before releasing the HPKE non-public key. All subsequent reads through the root partition are checked against the Merkle tree. This ensures that the whole contents of the ba