in the course of boot, a PCR of the vTPM is extended Along with the root of this Merkle tree, and later on confirmed because of the KMS right before releasing the HPKE non-public key. All subsequent reads from your root https://noransomattack.com