Last I looked the NitroTPM product didn't have anything like an Endorsement Key certificate or any mechanism for authenticating a public Endorsement Key. Discr

Last I looked the NitroTPM product didn't have anything like an Endorsement Key certificate or any mechanism for authenticating a public Endorsement Key. Discrete TPM chips usually have an EKcert. GCP's vTPMs do not have an EKcert but Google provides a facility for looking up a guest's EKpub. It'd be nice if NitroTPM also had this. Also, it's passingly strange to see PCRs mentioned with no mention of TPMs.