During boot, a PCR with the vTPM is extended Using the root of this Merkle tree, and later verified via the KMS just before releasing the HPKE private key. All subsequent reads from the basis partition are checked https://no-ransom-6dmd.vercel.app