During boot, a PCR of the vTPM is prolonged Together with the root of the Merkle tree, and afterwards confirmed via the KMS prior to releasing the HPKE non-public essential. All subsequent reads from the root partition https://noransomattack.com