Skip to main content

Questions tagged [tpm]

TPM (Trusted Platform Module) is both the name given to a published specification detailing the characteristics of a criptoprocessador safe, capable of storing cryptographic keys that protect information and the general name of implementations of this specification, often called "TPM chip" or "TPM Security Device".

Filter by
Sorted by
Tagged with
0 votes
1 answer
4k views

windows 11 error The Secure Boot update failed

for some reason this error is constantly thrown and logged in the Windows Event Viewer: The Secure Boot update failed to update a Secure Boot variable with error Secure Boot is not enabled on this ...
Semen Shekhovtsov's user avatar
0 votes
0 answers
430 views

ASUS H97-Plus and TPM 2.0

I bought for my ASUS H97-Plus motherboard this TPM 2.0 module, but it is not being recognized by the BIOS also after saving changes and restart, Anyone can advise on how to make it work, if it's ...
bbProg's user avatar
  • 1
0 votes
0 answers
314 views

How to get minimal vendor information about the TPM chip installed in my laptop

How do I get some minimal information about the TPM chip in my Linux laptop? Information such as the manufacturer, manufacturer id, manufacturer version. So far I have tried the tpm2_getcap command to ...
a001's user avatar
  • 1
0 votes
2 answers
347 views

Is possible to know from MS Windows OS if dTPM or fTPM is used?

Is possible to know from MS Windows OS, if OS uses discrete TMP chip (dTPM) or fTPM (Intel PTT, AMD fTPM) without going to BIOS or peeking inside the computer case? E.g. when I open tpm.msc I see ...
xmedeko's user avatar
  • 143
1 vote
2 answers
1k views

Able to unlock BitLocker drive, but unable to obtain the 48-digit recovery key

I'm trying to obtain the 48-digit BitLocker recovery key from a failed drive. Here's what happened: Windows 10 Professional was installed on a Samsung 980 Pro 2TB drive. The login was a local user ...
My other car is a cadr's user avatar
1 vote
0 answers
177 views

Why does TPM think I installed a new CPU?

I disassembled then reassembled a computer, I rebooted and got a message saying that I installed a new CPU or reset the NV structure. I don't really think I did either, there was only one RAM slot and ...
The Floating Brain's user avatar
2 votes
1 answer
271 views

Is TPM-only Bitlocker protecting multiple hard drives in case of a stolen computer?

How exactly does Bitlocker work in TPM-only mode, when I not only encrypt the boot drive but also other drives with data? If someone steals the whole computer he can't login, due to a windows password....
jusaca's user avatar
  • 97
3 votes
1 answer
319 views

Cannot protect GPG key using TPM2 on Ubuntu 22.04

I'm trying to protect a GPG key using the TPM2 available on my laptop, but I'm not having any success. Probably I'm doing something wrong, but I cannot figure out what this is. My system is running ...
sergico's user avatar
  • 171
-1 votes
1 answer
133 views

Does the Samsung NP-RV711 laptop support Windows 11? [duplicate]

Holiday season is approaching - understand the maintenance season for my relatives’ computers 😅 I’ve been asked for support to reformat an old laptop from 2012. AFAIK it is still running Windows 7 to ...
Pierre F's user avatar
0 votes
2 answers
2k views

Virtualbox TPM vs hosts TPM

Question: is the TPM option in virtualbox 7 an emulator? I want my guest OS to have NO access to the hosts hardware TPM, but instead to use a "portable" TPM from vbox, so that copying the ...
user152037's user avatar
0 votes
0 answers
155 views

Why is my TPM bugged? If I enable checks on PCR 8,9,10, it ALWAYS asks for decryption password even if it shouldn't

I've also checked with systemd-analyze pcrs if PCRs are the same at every reboot, and they are. Only at first reboot I don't know why the only PCRs that change are 8,9,10 lol(I don't know why)... but ...
Allexj's user avatar
  • 254
1 vote
0 answers
189 views

Why the TPM PCRs does not consider a UEFI settings change? If someone resets CMOS, it's undetected

In my laptop I've set up a bios pw when I power on the laptop, and once I enter it the laptop starts my linux distro and decrypts the disk without asking any other password. To do this I've set up TPM ...
Allexj's user avatar
  • 254
2 votes
0 answers
1k views

Secure Windows SSH Key with Windows Hello / TPM

I want to secure my Windows SSH Key with Windows Hello (my fingerprint / TPM) instead of a simple passphrase. I found that OpenSSH can do this since v8.9 ( https://man.openbsd.org/ssh-keygen#...
xsrf's user avatar
  • 131
2 votes
1 answer
1k views

LUKS encryption using passphrase + TPM

I have questions about secure boot and TPMs and I couldn’t find precise answers on the web, so I’m hoping someone skilled in this domain will be able to answer. In a case of an evil maid attack, what ...
gfaure's user avatar
  • 31
0 votes
1 answer
544 views

How to interact with a TPM at boot time?

I'm currently experimenting with a minimal linux system built through Buildroot in which I want to use a TPM to derive a key and make some measurements during boot. At best, this would happen in the ...
msanft's user avatar
  • 3
0 votes
0 answers
2k views

Why could TPM be enabled in BIOS but not functional in OS?

If the BIOS of a computer system shows that TPM is enabled then one would think this would mean the operating system would be able to use the TPM. However, this is not necessarily the case. The ...
Ad Astm's user avatar
  • 302
-1 votes
5 answers
10k views

How to physically identify a Trusted Platform Module (TPM) on motherboard

Many TPM issues are reported by users in various online forums. One issue is the TPM being found in the operating system or BIOS without the TPM being useable (e.g. TPM shows in Windows 10 Pro Device ...
Ad Astm's user avatar
  • 302
3 votes
1 answer
1k views

BitLocker can't enable encryption on this hardware encrypting drive volume because the drive bands couldn't be enumerated

I'm using Windows 11 Pro. I'm trying to encrypt an external HDD through BitLocker (Seagate One Touch w/PW SCSI), size: 2TB. My PC Specs: Error Message BitLocker can't enable encryption on this ...
skywalkerSam's user avatar
0 votes
1 answer
907 views

How to edit TPM-encrypted .vmx?

I am using VMWare Workstation 17 and am running an instance of Windows 11 on it. As per Windows 11 requirements, all the files (including the .vmx) must be TPM encrypted. I am trying to modify the '...
BRUJOjr's user avatar
  • 28
0 votes
1 answer
405 views

TPM clear on Bios not reset all accounts using PIN numbers

I have an interesting problem: Windows 11 Pro on 3 year old computer with TPM 2.0. Windows is updated to latest version, eset internet security , 3 user accounts, one local with admin rights, two ...
Sergio's user avatar
  • 1
0 votes
2 answers
2k views

Bypassing TPM/SecureBoot checks when installing Win11 without Rufus

I need to install Windows 11 on an older PC that doesn't support TPM and SecureBoot. According to this article, it's possible by creating DWORDs with the names BypassTPMCheck and BypassSecureBoot (...
Shtole's user avatar
  • 3
0 votes
1 answer
2k views

Is there any risk in installing Linux without TPM - backdoor risk? ,Management Engine Technology [closed]

I have no confidence in this technique due to the risk of backdating. Are my concerns justified. Do I lose security by disabling this option in the bios? Windows requires this, but Linux does not. ...
Santa Monica's user avatar
0 votes
1 answer
336 views

GnuPG and TPM : IPC error

Ι installed the latest version of gpg in manjaro OS: $lsb_release -a LSB Version: n/a Distributor ID: ManjaroLinux Description: Manjaro Linux Release: 22.0.4 Codename: Sikaris and test tpm ...
111's user avatar
  • 131
0 votes
1 answer
2k views

Why was enabling tpm 2.0 wrong

As I said in this question, I enabled tpm 2.0 on my pc (a custom build with windows 10 on it), and, apparently, this messed up the filesystem or something and I get “WHEA_UNCORRECTABLE_ERROR” and “...
selenio34's user avatar
  • 119
0 votes
0 answers
433 views

Can we use the same Hyper-V Shieled VM certificate to create more Shielded VMs on a different host?

I had 2 shielded VMs on my Windows 11 prior to clean installing it. I had backed up the 2 certificates for signing and encryption. after importing them, I can access my 2 shielded VMs, no problem, but ...
user avatar
0 votes
1 answer
35 views

Windows 11: a special requirement on the HW?

Is there some special requirement when I want to install and use Windows 11 on my PC ? May I delete my Windows 8.1 and simply buy a CD-ROM with 11 and in fact change no component, be it processor or ...
user1766349's user avatar
0 votes
0 answers
2k views

Windows 10 crashes after enabling tpm 2.0

MY PC AND WHAT I WAS TRYING TO DO I wanted to update from win 10 to win 11, and I read that, to do it, I had to enable tpm 2.0. The pc is a custom build and I have a meg z590 ace motherboard. Windows ...
selenio34's user avatar
  • 119
0 votes
1 answer
704 views

TPM 2 simulation with Windows 10?

I have an Asus Hero XI wifi with a 9900k but I never installed any TPM 2.0 chip (I confirm, there are no installed TPM 2.0 chip). I remarked that device manager is showing since a while a TPM 2.0 ...
Soleil's user avatar
  • 403
0 votes
1 answer
13k views

How to disable Windows TPM without going into BIOS?

Ever since my purchase (In June 2022), my 2022 Zephyrus GA503RM (Laptop) has been experiencing a system-wide stutter. I found some threads and an official post from AMD that it's being caused by ftpm. ...
The Doctor's user avatar
2 votes
1 answer
1k views

Allocate PCR banks for TPM in Linux

I want to have all PCRs (0-23) in sha1 and sha256 banks, but now I only have sha256 set and sha1 is empty but exists, tpm2_pcrread outputs: sha1: sha256: 0 : ...
k1r1t0's user avatar
  • 123
0 votes
0 answers
161 views

Asus (Hero VIII) BIOS TPM stopped working

I have installed windows 10 on this PC a few times and upgraded to windows 11 once but now its not seeing the TPM settings System Info
Ricardo Saracino's user avatar
1 vote
1 answer
1k views

Is there any vulnerability if I encrypt disk with LUKS and TPM without specifying pcr_ids?

According to many tutorials on the internet, the process of adding a TPM-stored key to LUKS is to run clevis luks bind -d /dev/sda1 tpm2 '{"pcr_ids": "7"}', but I received the ...
Steven Yang's user avatar
0 votes
0 answers
3k views

Issues trying to boot Hirens BootCD on a HP with TPM and Bitlocker enabled

I am trying to boot Hirens BootCD on a HP with TPM and Bitlocker enabled. The boot will freeze after initializing the boot process. Secure boot is disabled. Neither secure boot nor without secure boot ...
OliWie's user avatar
  • 1
5 votes
2 answers
10k views

Listing content of a TPM 2.0 chip

I would like to list the information stored on a TPM chip, by type, just to see that all relevant data was migrated to a new machine before clearing the TPM chip of the old machine. I am not looking ...
TFuto's user avatar
  • 182
1 vote
0 answers
331 views

Is it possible to allow only a certain secure USB boot media to boot an UEFI system?

I want to restrict all USB boot media from my system, except for a certain USB boot drive that I declare secure via a certain key. Is this possible using UEFI/Secure Boot/TPM? Maybe via TPM? TPM gets ...
JohnnyFromBF's user avatar
  • 4,988
0 votes
0 answers
505 views

Office 365 Installation TPM malfunctioned

Troubleshooting a WIN10 office 365 installation - it works fine BUT I cannot verify the office 365 license (we use intermedia office365 ) - I get a TPM error 80090034 - any ideas? Getting Office 365 ...
thomas erb's user avatar
1 vote
1 answer
3k views

LUKS using clevis TPM2.0

Hi I'm trying to encrypt a secondary data disk. I want this disk to be decrypted during boot of my machine. I currently have RAID setup, with an LVM volume on top which is already encrypted with LUKS. ...
Tthecreator's user avatar
0 votes
0 answers
846 views

Why Bitlocker with TPM requires fastboot in BIOS

HP Probook 445 G7 When I turn off fastboot in BIOS under Advanced > Boot Options bitlocker stops working. It goes in Bitlocker recovery after I enter the password (extended alphanumeric pin with ...
axk's user avatar
  • 1,013
1 vote
0 answers
143 views

USB Windows 11 for TPM/SB created on non-TPM/SB system

What option is needed to install Windows 11 to a live persistent USB on a non-TPM/Secure Boot system, if the USB will be used on a TPM/Secure Boot system. I assume it is the Standard with TPM & ...
unksoldr's user avatar
0 votes
0 answers
3k views

bitlocker recovery triggered, cannot boot windows

I enabled bitlocker on my Alienware 15 R3 in 2018 (win10), protection method is tpm + pin normally windows would boot after I input the pin however, a month ago, the system had a freeze. at reboot, it ...
paulga's user avatar
  • 1
0 votes
1 answer
296 views

What are the non-Bitlocker TPM keys I need to check before clearing TPM?

I've read the threads here (like this one and this one) on clearing TPM and the need to either suspend Bitlocker or have backups of the keys. That's fine. But in the Microsoft Docs under the section &...
Joe's user avatar
  • 113
1 vote
2 answers
3k views

Windows 11 install with disable TPM and secureboot option for older computer

I try to install Windows11 pro on my old computer which is not meet the minimum requirements for windows 11. It does not have TPM (Trusted Platform Module). So, I try to install with Rufus 3.17 with ...
smith john's user avatar
3 votes
1 answer
1k views

TPM not offering to unlock C:\ drive automatically at boot up: "Chose how to unlock your drive at startup" (Flash drive or PW)

I'm trying to enable BitLocker on a Win10 (Dell Optiplex 7040) desktop. The issue I'm facing is that I need the drive to auto-unlock at startup since it will often be used remotely via RDP (rebooting ...
KidACrimson's user avatar
0 votes
1 answer
1k views

TPM2.0 Compatibility? (ASRock z97x Fatal1ty Killer motherboard)

I had an SSD failure yesterday (my OS disk), so I decided it might be time to try Windows 11. I was a little shocked to find my PC is not compatible.  It seems I need a TPM2.0 compatible motherboard. ...
I_Keep_Trying's user avatar
1 vote
2 answers
3k views

If Windows 10 Power Shell shows get-tpm with all "false", and bios is up to date, it means I can't have it?

I'm looking to update my Windows 10 to 11. Now I need this "TPM" thing. I have a Dell G3, I updated the bios using the SupportAssist, but when I type on powershell > "get-tpm" I ...
The Student's user avatar
-2 votes
1 answer
604 views

Installing windows 11 on unsupported computer

I want to install windows 11 but my pc is unsupported, here are my specs Device name iMac Processor Intel(R) Core(TM) i5-6400T CPU @ 2.20GHz 2.21 GHz Installed RAM 7.89 GB System type 64-bit ...
Vansh's user avatar
  • 1
1 vote
0 answers
305 views

Lenovo Laptop Windows Encryption

Do the Lenovo legion 5 laptops support windows encryption ? Basic device encryption on windows 10 or 11 requires the following: Trusted Platform Module (TPM) version 2 with support for Modern Standby....
mister_cool_beans's user avatar
0 votes
3 answers
2k views

How to re-enable TPM after decrypting C: drive from BitLocker?

I have a Surface Pro 6. One day my computer got locked with BitLocker (for no apparent reason). After recovering the key I disabled device encryption and decrypted my hard drive. If I now do manage-...
Victor2748's user avatar
2 votes
1 answer
782 views

How can I update TPM on Windows 10 machine for Windows 11?

When preparing my 5-years old Intel Core i7 computer for Windows 11, I ran PC Health Check. These are the results: Regarding TPM, I tried to upgrade it to 2.0. From Trusted Platform Module (TPM) ...
Farhan's user avatar
  • 451
2 votes
0 answers
3k views

Kernel DMA Protection and Device Encryption support is off, even with Intel Virtual Tech enabled. How to enable?

Computer Configuration This is the laptop. Lenovo Legion Y740, Intel core i7 9750H, 17.3" 144Hz GSync, RTX 2080MQ, 16GB RAM, 1TB SSD, Windows 11 Home 21H2 (Build 22000.258) Intel Virtual ...
Bikram Agarwal's user avatar