through boot, a PCR of your vTPM is extended Together with the root of this Merkle tree, and later verified because of the KMS before releasing the HPKE non-public critical. All subsequent reads from the foundation https://noransomattack.com