THE DEFINITIVE GUIDE TO CONFIDENTIAL EMPLOYEE

for the duration of boot, a PCR of your vTPM is prolonged Together with the root of this Merkle tree, and later confirmed through the KMS before releasing the HPKE non-public key. All subsequent reads from the basis partition are checked against the Merkle tree. This makes sure that the entire contents of the foundation partition are attested and a