Fish Wang
says to
YSITD
TPM 好像是虛擬化kernel保護的需求