Ro.boot.vbmeta.digest ~upd~ -

The Keymaster HAL (Hardware Abstraction Layer), which manages cryptographic keys, uses the VBMeta digest to derive "Version-Bound Keys." This means that cryptographic keys generated by the hardware can be cryptographically tied to the specific firmware version running on the device.

This property represents a of the VBMeta data structure that the bootloader verified before starting the kernel. ro.boot.vbmeta.digest

Ensure AVB is enabled: