through boot, a PCR in the vTPM is extended Together with the root of this Merkle tree, and afterwards verified with the KMS just before releasing the HPKE personal key. All subsequent reads through the root partition https://bookmarkingfeed.com/story18250734/a-simple-key-for-confidential-generative-ai-unveiled