A task that the Trusted Platform Module (TPM) performs by confirming that the SHA-1 computed hash of each system component that runs during boot matches the values that are stored in platform configuration registers (PCRs) at the time BitLocker Drive Encryption was turned on. If the state of early boot components is different from the static root of trust measurement, BitLocker boots to recovery mode until the authorized user enters the recovery password.