Super User
Super User

Questions tagged [tpm]

TPM (Trusted Platform Module) is both the name given to a published specification detailing the characteristics of a criptoprocessador safe, capable of storing cryptographic keys that protect information and the general name of implementations of this specification, often called "TPM chip" or "TPM Security Device".

209 questions
23
votes
1 answer

AMD fTPM - What does this firmware option do?

I have ASRock X370 Professional Gaming (AM4) motherbord with Ryzen 7 CPU. It has network firmware upgrade option, but I had to disable fTPM to enable network flash option. What exactly is fTPM option? What enabling it does? I've read it's related to…
Harry
  • 745
  • 3
  • 7
  • 18
19
votes
2 answers

What happens if I enable TPM on a running/already installed Windows OS?

Will I lose my files? Will Windows keep booting? I'm running Windows 10 without TPM enabled. My system supports TPM 2.0, but it's currently disabled, and since it seems that the new Windows 11 will need that feature, I wonder if I can be enabled…
E_Blue
  • 763
17
votes
4 answers

Clearing TPM does not ask for new password, but "change owner password" asks for the old one

I recently cleared my TPM (Dell e7240, Windows 10). During the process, at no point did Bios or Windows ask for a new TPM password. (And at no point since I bought this laptop did I ever set a TPM password, to the best of my knowledge.) I have tried…
cfp
  • 283
14
votes
4 answers

What is the difference between various TPM modules?

I was looking for a TPM 2.0 module for my Gigabyte Z87MX-D3H and I found that the brand of the module is not important. The ones I found are: ASUS TPM-M R2.0 14 pin Asus TPM-L R2.0 20 pin Asus Trusted Platform Module TPM/FW3.19 (20 pins) Gigabyte…
FarO
  • 1,968
12
votes
5 answers

How to remove WebAuthN credentials from onboard-TPM on Win10 device?

Latest builds of Windows 10 allow browsers (at least Edge and Chrome) to use on-board TPM device for WebAuthN passwordless authentication. It does work for me and on test sandbox sites - I can generate private-public key pairs, store private key in…
bedrin
  • 147
11
votes
2 answers

Will clearing the TPM make BitLocker encrypted data unavailable?

I've learned in this answer that starting with Windows 10 v1607, Windows will not allow to set, save or change the TPM owner password by default. So the option to reset a TPM lockout by entering the owner password does not appear to exist anymore.…
u17
  • 539
10
votes
2 answers

Full Disk Encryption with TPM, not subject to cold boot attack

Here's a passage from Wikipedia on BitLocker Once a BitLocker-protected machine is running, its keys are stored in memory where they may be susceptible to attack by a process that is able to access physical memory, for example, through a 1394…
galets
  • 391
9
votes
5 answers

Do TPM modules only work for motherboards of the same vendor?

Most types of desktop computer parts are agnostic of the vendor. For example, you can use a DDR RAM from any vendor on a motherboard from any vendor, as long as they have the same standards. If I search eBay for TPM Module, top list shows ASUS,…
Damn Vegetables
  • 4,308
  • 19
  • 60
  • 98
9
votes
2 answers

Listing content of a TPM 2.0 chip

I would like to list the information stored on a TPM chip, by type, just to see that all relevant data was migrated to a new machine before clearing the TPM chip of the old machine. I am not looking for dumping private keys, etc., just a list of IDs…
TFuto
  • 222
9
votes
2 answers

Is Linux full-disk encryption with seamless user experience ala FileVault (macOS) or BitLocker (Windows) possible?

I've found some full-disk encryption (FDE) solutions for Linux OSes. Specifically, I've looked at solutions that work on Linux Mint or Ubuntu, since that's what I tend to use. But I'm sure this question applies to other distros, as well. I'm looking…
JDS
  • 482
  • 1
  • 7
  • 15
8
votes
1 answer

Got a Warning For Enabling Firmware TPM

I recently enabled Firmware TPM in my BIOS in order to see if my system is compatible with Windows 11. My question is about the following warning I got when I enabled Firmware TPM: Intel PTT is a hardware TPM 2.0 implementation integrated in…
Floating Sunfish
  • 465
8
votes
3 answers

How to enable BitLocker when booting Windows 10 from a non-Microsoft boot manager?

My setup I have ThinkPad P1 Gen 3 laptop and want it to dual boot Linux and Windows 10. For that I want to use a boot manager supporting both Linux and Windows; currently I'm using rEFInd. I also want to have Secure Boot on and have my Windows drive…
Robert Kusznier
  • 359
7
votes
3 answers

How do I get a TPM module for a motherboard that does not already have one?

I have an ASUS P8P67 DELUXE motherboard, which (as far as I can tell) does not come with a TPM module, so I can't use BitLocker without a PIN or USB key. Is there any way to buy and install a TPM module myself?
grant
  • 183
7
votes
1 answer

Benefits of a Trusted Platform Module for a home user?

I'm a reasonably computer-savvy user who dual boots Linux and Windows 10, and I'm interested in security against malware, remote exploits, etc. on my home desktop. At least in theory, could a Trusted Platform Module (TPM) provide any protection…
lnmaurer
  • 185
6
votes
2 answers

How do I enable TPM in the BIOS?

I have a new motherboard (Asus Sabertooth Z87) which cliams to support TPM. However, when I attempt to enable TPM - I don't see an appropriate setting in the BIOS. Obviously I'm looking for something like "TPM: Enable/Disable" :) - perhaps there's…
sd_
  • 283
1
2 3
…
13 14