The public key has to be known by the BMC, BIOS, OS. You can read the public key from the TPM. If you're using the endorsement key, it comes with a certificat

The public key has to be known by the BMC, BIOS, OS. You can read the public key from the TPM. If you're using the endorsement key, it comes with a certificate issued by the vendor.