Questions tagged [tpm]

TPM (Trusted Platform Module) is both the name given to a published specification detailing the characteristics of a criptoprocessador safe, capable of storing cryptographic keys that protect information and the general name of implementations of this specification, often called "TPM chip" or "TPM Security Device".

Filter by
Sorted by
Tagged with
0
votes
1answer
13 views

Does Bitlocker encryption with TPM protect against the sethc.exe / sticky keys exploit?

I'm trying to ensure that in the event of device loss/theft, my files are secure. I use Bitlocker (TPM), but today I was reading about the sethc.exe/sticky keys hack to reset the administrator ...
4
votes
2answers
491 views

How to enable BitLocker when booting Windows 10 from a non-Microsoft boot manager?

My setup I have ThinkPad P1 Gen 3 laptop and want it to dual boot Linux and Windows 10. For that I want to use a boot manager supporting both Linux and Windows; currently I'm using rEFInd. I also want ...
0
votes
0answers
21 views

After clearing TPM my computer boots and shows a blank screen?

I did a system reset and cleared windows TPM after I did that the system started setting up and during the process it said the system will restart a couple of times. After the first reset the system ...
1
vote
0answers
184 views

Bitlocker on KVM/QEMU/virt-manager Windows guest using TPM passthrough

I have a dual boot installation on my Lenovo T480s: Windows 10 and Fedora 33. As I prefer working on Linux but need to have quick access to some Windows exclusive programs, I've configured QEMU (in ...
1
vote
2answers
48 views

Microsoft Bitlocker and TPM

I'm planning to buy a HP Envy 15-ep0813 computer, but I've spent hours trying to understand if that has TPM-like support so that I don't need to enter a passowrd prelogon, which for me is a must. I ...
1
vote
0answers
208 views

Enable Disk / Volume encryption without password prompt at boot

I need to encrypt Disk / volume / File system on Linux, but which will not require a password prompt at reboot. While this will not prevent data theft if the entire system is snitched, it should at ...
0
votes
1answer
283 views

What are the consequences of clearing TPM without backing up your data after you encountered Office365 with errors code 80090016?

My Office 365 products (Word, PowerPoint, Excel, etc) suddenly produced an error after signing in and trying to reactivate it with my educational email. It said Something went wrong Your computer's ...
0
votes
0answers
40 views

How can I get back to my laptop with TPM 2.0 and Full Disk Encryption enabled?

I have Dell Latitude 7400 with full disk encryption (FDE) with Checkpoint Sandblast agent. I went to BIOS and accidentally set Security -> TPM 2.0 Security to Disabled and rebooted laptop. I was ...
1
vote
0answers
154 views

Clone win 10 with tpm and bitlocker to bigger disk

I got a new PC for a job, the situation is that I'm not a windows administrator and I have several limitation in using needed software without admin rights. the volume is encrypted with bitlocker, I ...
0
votes
0answers
27 views

Trusted platform module, computer wouldn't turn on

My motherboard is MSI B450M PRO-VDH MAX, and I bought a TPM separately, Asus TPM-M R2.0 14-1 Pin. Physically, the TPM fits on my motherboard, but as soon as I insert the TPM, a red light on the GPU ...
2
votes
0answers
334 views

Powershell and BitLocker - When changing Protectors from Password to TPMandPIN protector are you required to Suspend Powershell and then renable?

I have a Password Encrypted SDD I am moving from an old host (No TPM) to a new one with a TPM installed. I DO (yes do) know my password. I do not want to decrypt and encrypt (I honestly do not want to ...
0
votes
0answers
20 views

Setting the TPM DA Lockout parameters in Windows

I want to set the TPM DA Lockout parameters (tries and healtime), i found some Group Policy settings but they seem to set the parameters only in Windows (maybe for the TPM resource manager) and are ...
0
votes
0answers
28 views

TPM 2.0 causes high temps and boot fail

So I just bought a TPM 2.0 module for my second PC which I mainly use for video editing and 3D animation, so it's a fairly high-end machine. I installed the TPM module on the motherboard, and turned ...
0
votes
0answers
566 views

BitLocker asks for recovery key after every boot (dual-boot system)

I dualboot Windows 10 Pro and Ubuntu. I recently reinstalled W10 and installed a Trusted Platform Module, which directly enabled me to encrypt C: (and D:) and automatically decrypt on boot. However, I ...
0
votes
0answers
94 views

How can BitLocker be configured to not require additional authentication if Secure Boot is disabled

I have a laptop with Windows 10 1703 installed, that I am trying to determine how BitLocker has been configured on. In the BIOS the laptop has Discrete TPM selected but also has the option of Intel ...
1
vote
0answers
139 views

How do I open a windows 10 bitlocked ssd with a pin on a windows 8.1 pro computer?

Drive was a boot drive with windows 10 and bitlocked (automatically? dont recall doing it) and was secured by a pin and fingerprint. This was from a thinkpad with a TPM module. Computer is not part of ...
1
vote
0answers
871 views

The initialization of the Trusted Platform Module (TPM) failed

Today I've checked EventViewer -> Windows Logs -> System and saw that almost every second there is error entry with a message The initialization of the Trusted Platform Module (TPM) failed. The ...
0
votes
1answer
868 views

Failed to initialize tcti context

Finding information for TPM2 and even worse for Ubuntu 18.04 server is quite a drill. I have a machine with an intel TPM V2 module onboard and basically trying to have it unlock LUKS on boot. So far I ...
1
vote
1answer
993 views

Unable to Auto-unlock encrypted data drives (Win10)

When I try to encrypt my non-OS partitions, the option "Automatically unlock this drive" is grayed out. My notebook is in a domain, and the Bitlocker Drive Encryption wizard says that these settings ...
3
votes
3answers
1k views

How to remove WebAuthN credentials from onboard-TPM on Win10 device?

Latest builds of Windows 10 allow browsers (at least Edge and Chrome) to use on-board TPM device for WebAuthN passwordless authentication. It does work for me and on test sandbox sites - I can ...
0
votes
1answer
394 views

How to decrypt the luks encrypted hard disk password automatically using tpm2 | ubutnu 18.04

I have encrypted my hard disks using default method(Luks encryption) present in ubuntu 18.04 and I have tpm2, now i wanted to save my passwords on tpm2 device and decrypt automatically without ...
0
votes
0answers
1k views

How to configure the AMD FTPM

I realized that I have an embedded TPM on my motherboard. I enabled it but don't know if it is just working now. I don't want to use it for encrypting the hard drive, only to confirm that BIOS is ...
0
votes
2answers
361 views

Configuring WPA supplicant to use tpm2 pkcs11 tools

I would like to configure WPA supplicant to authenticate with TPM 2.0 managed certificate in order to connect to company network. I created RSA keypair managed by my TPM, generated CSR and recieved ...
0
votes
1answer
422 views

How to manage RSA keypair in TPM2 using Linux

I'm trying to use TPM 2.0 chip in my laptop to manage new pair of RSA keys and create a CSR on top of new private key but when I list certificates managed by my TPM, I got only keys labeled as public ...
1
vote
0answers
643 views

What are these bugs when dual-booting windows with deepin OS?

So I'm dual booting windows 10 with Deepin OS but I keep running into errors that I can't find solutions to because I can't figure out what's wrong. I've followed multiple tutorials, doing everything ...
1
vote
1answer
748 views

How to store GPG keys in TPM

Am working on GPG mechanism to code sign my debian packages. I have generated both Master Key pair and Subordinate Key pairs to sign my packages. Now i want to store my key-pair in TPM hardware ...
1
vote
1answer
539 views

Bitlocker with TPM but without USB key?

I have Windows 10 x64 version 1903 build 18362.418. Recently I have added a TPM module (specification version is 2.0) to my machine and as far as I can tell it is working properly: its Status in tpm....
2
votes
0answers
129 views

Using Bitlocker with no TPM present, but instead using a USB key

I am trying to figure this out two things when using Bitlocker by storing the encryption key on a USB drive. I would like to understand two scenarios. Scene 1: I encrypt the drive using bitlocker ...
0
votes
0answers
24 views

Implication of physical access to a hard drive with Bitlocker enabled but without TPM

I have a Windows 10 machine (fully updated as of 2019-10-23) in a work place that I leave at work at the end of the days. I have enabled Bitlocker for the main OS drive which houses some personal data....
0
votes
1answer
126 views

TPM Key Authenticity and Verification

How can the authenticity of the keys stored in the TPM be verified to be authentic? How can the PK, KEK, db and dbx keys viewed by using the command "mokutil --'xx'" (in Ubuntu) be verified to be the ...
0
votes
2answers
365 views

TPM 2.0 Hardware software issue?

I recently bought a Dell Precision 5530 form a guy that I have later found out is/was a gov employee. After changing the Nvme 50 0GB hard drive to a Samsung Evo 970 1 TB and installing Ubuntu (and ...
0
votes
1answer
2k views

What is needed for Intel's fTPM technology to to work?

I am planning to upgrade my PC and to buy some new parts and I want to make sure that I can skip the physical TPM header on the motherboard so I can compare more motherboards and options. I find it ...
3
votes
1answer
542 views

Use Windows Hello Face recognition without TPM chip

Is there any possible way to use my IR-Webcamera for windows hello login without a TPM chip on my motherboard? I had this setup WITH a TPM 2.0 before but something went wrong and the TPM is not ...
0
votes
1answer
461 views

How to clear TPM 2.0 on Dell Inspiron 15 with recent BIOS?

I have a Dell Inspiron 15 (7577), service tag HG6D142, with BIOS version 1.8.0. I wanted to issue Clear TPM command from Windows 10 (build 1903), but this appeared: Clear TPM - device does not ...
1
vote
1answer
149 views

How to make Bitlocker recovery password unreadable/unrecoverable?

I use TPM2.0 + Bitlocker + PIN to encrypt SSD with Windows 10 Professional. I have backed up recovery password and continued. After the encryption complete and two reboots behind I can write in ...
1
vote
1answer
2k views

Do AMD PSP's have TPM?

I was recently wondering about systems which can protect a computer against firmware malware. A user on Information Security said that the an attempt to make a computer more secure is the TPM system. ...
0
votes
1answer
473 views

Accessing Trusted Platform Module(TPM) without root permission

Am Working on Trusted Platform Module(TPM) chip(Both TPM12 and TPM20). As of now am doing some operations on TPM such as, taking TPM ownership, Clearing TPM, Generating Keys inside TPM etc. But for ...
0
votes
1answer
92 views

Is TPM in lockout mode, when uplug a socket of an internal power supply in Lenovo T440s

My colleague's Lenovo T440s cannot power on/up yesterday, so I opened up the laptop and unplug the socket of the internal battery. I put everything back to normal and power on, and it powered on, so ...
0
votes
1answer
173 views

Trying to start Biitlocker I get “This device can't use a Trusted Platform Module.”

I am trying to upgrad a 500GB SATA disk that was bitlocker encrypted to a 2TB disk. Here's what I have done so far. 1. Turn off bitlocker on the source disk. This was necessary to be able to expand ...
0
votes
1answer
2k views

BitLocker won't accept correct disk password after… something

The company I work for has computers with TPM chips and Windows 10 Enterprise, and uses BitLocker for full-disk encryption. They have BitLocker configured to require a password at boot (which I ...
0
votes
0answers
653 views

Installing TPM on Windows 10

I have a Sabertooth 990fx revision 2 motherboard, which I've had a number of years and am quite happy with. It is using the 2901 BIOS from 2016, which appears to be the latest available. I wanted to ...
1
vote
1answer
348 views

Save TPM initialization key, re-initialize, then restore

From what I've read, when you initialize a TPM chip it creates a random derived key (derived from its implicit root key). Other users will then set PCRs (i.e. UEFI, bootloader, etc), and eventually ...
0
votes
1answer
108 views

Windows 10 - Bitlocker - TPM with USB key - Not working

I’ve tried to implement Bitlocker TPM with USB key: I can see the .bek with ‘dir /A:S’. After a restart, the system doesn’t find any USB key. Anything I forgot? Thanks in advance.
1
vote
1answer
1k views

Which TPM PCRs does Windows seal into the BitLocker password?

For example, does it seal PCR1 into the password? What about PCRs 2 and 3?
1
vote
0answers
198 views

View TPM PCR contents on Windows

How do I view the PCR register contents on Windows? On Linux, you cat /sys/class/tpm/tpm0/device/pcrs, but I cannot find the Windows equivalent.
0
votes
1answer
474 views

Integrity Measurement - TPM-bypass

I am digging into Integrity Measurement Architecture and try to enable it on an embedded device. I have enabled the IMA related configuration flags and compiled the kernel. I can now see xattr ...
0
votes
1answer
540 views

Upgrade from TPM 1.2 to 2.0 on a Dell Precision T7610

I need to upgrade the TPM firmware on my Dell Precision T7610 from v1.2 to v2.0, however there is no TPM upgrade available on the Dell support website. They have an upgrade utility that covers a wide ...
1
vote
1answer
2k views

TPM 2.0 hardware error DA lockout mode

I'm getting same error as mentioned in this post: TPM 2.0 simulator error DA lockout mode but with a discrete hardware tpm 2.0 module instead of simulator. Tried clearing ownership: # ...
3
votes
2answers
3k views

How does deactivating TPM in the T480 UEFI settings affect bitlocker? Is the TPM cleared?

My Lenovo T480 runs a Bitlocker protected Windows 10 installation. Bitlocker is configured to lock the system (request the passkey) if there are any hardware changes. I would like to keep the ...
3
votes
1answer
1k views

How can Windows boot with Bitlocker after clearing the TPM?

After installing Windows, I turned on Bitlocker for a full C:\ drive encryption. I saved the recovery keys and then let Bitlocker proceed with encrypting the full drive. When I rebooted, I was ...