TPM manufacturing

[zvonkok]

Some high-level questions about the architecture:

1. The vTPM is ephemeral; it will not save any state and is unique to each VM; stopping or rebooting the VM will erase any internal state?
2. Is the EK private key created on each VM boot?
3. How is the EK Cert created, and to which root authority does it chain? Which entity is doing an attestation report with the hash of the EK pub key to authenticate the vTPM, which would chain it to the Intel root key?
4. How is the vTPM protected against OVMF/Kernel/Guest OS? In SEV-SNP there are VM privilege levels where a vTPM runs in VMPL0, OVMF,Kernel in VMLPL1 and so forth.
5. Does the vTPM implement the TPM2.0 spec or only part of it?