A clickable chain of trust for a Google Cloud confidential VM, from the AMD chip to userspace, with the vTPM inside the SVSM.
Each stage measures the next before handing over control. The firmware does the measuring; the image is what gets measured.
- Trusted. Darker red is closer to the hardware.
- Not trusted and not measured (outside the trust boundary).
- Layers below the one you zoomed into.
- Matches your search.