THE DEFINITIVE GUIDE TO AI CONFIDENTIAL INFORMATION

in the course of boot, a PCR on the vTPM is extended Using the root of this Merkle tree, and afterwards confirmed by the KMS ahead of releasing the HPKE private important. All subsequent reads in the root partition are checked from the Merkle tree. This makes certain that the entire contents of the root partition are attested and any try to tamper