through boot, a PCR of the vTPM is extended with the root of the Merkle tree, and later on confirmed by the KMS just before releasing the HPKE personal key. All subsequent reads with the root partition are checked https://one.aistudio.ml