works in conjunction with the Trusted Platform Module (TPM) to record the measurements (hashes) of all boot components, from the firmware to the bootloader and the operating system. These measurements are stored in the TPM to provide a detailed log of the boot process, which can be used to verify the integrity of the system.
Purpose: To provide a verifiable record that the system's boot components have not been altered by malicious software or other processes. This helps in detecting any unauthorized changes and ensuring the integrity of the system.