through boot, a PCR on the vTPM is prolonged Using the root of the Merkle tree, and afterwards confirmed from the KMS prior to releasing the HPKE personal key. All subsequent reads from the root partition are checked against the Merkle tree. This ensures that the whole contents of the basis partitio