vTPM/API correlation