It follows precisely the same workflow as confidential inference, plus the decryption crucial is shipped to the TEEs by the key broker support at the product proprietor, immediately after verifying the attestation https://graysonqcoq407204.blogocial.com/a-secret-weapon-for-safe-ai-apps-66265107