... call lockdown. In the lockdown world, your TPM comes with a set of signing keys it trusts, ...
... it's implemented in the certainty mode and not in the lockdown mode. ...