The measured boot report for a shielded instance.
Whether the verification succeeded, and the new values match the expected values.
The measured boot report for a shielded instance.