in the course of boot, a PCR with the vTPM is extended Along with the root of this Merkle tree, and later verified through the KMS before releasing the HPKE personal vital. All subsequent reads from your root partition https://honeypotz.net