During boot, a PCR on the vTPM is extended Along with the root of the Merkle tree, and later on confirmed because of the KMS just before releasing the HPKE personal essential. All subsequent reads from the root https://noransomattack.com