Record lookup Obtain RV certificates Retrieve secret (only if encrypted) End retrieve Begin verify Verify: record lookup Verify: obtain RV certificates Verify: module verification