Questions tagged [tpm]

TPM (Trusted Platform Module) is both the name given to a published specification detailing the characteristics of a criptoprocessador safe, capable of storing cryptographic keys that protect information and the general name of implementations of this specification, often called "TPM chip" or "TPM Security Device".

Filter by
Sorted by
Tagged with
4 votes
2 answers
3k views

How to store GPG keys in TPM

Am working on GPG mechanism to code sign my debian packages. I have generated both Master Key pair and Subordinate Key pairs to sign my packages. Now i want to store my key-pair in TPM hardware ...
0 votes
0 answers
86 views

How to get minimal vendor information about the TPM chip installed in my laptop

How do I get some minimal information about the TPM chip in my Linux laptop? Information such as the manufacturer, manufacturer id, manufacturer version. So far I have tried the tpm2_getcap command to ...
-1 votes
5 answers
6k views

How to physically identify a Trusted Platform Module (TPM) on motherboard

Many TPM issues are reported by users in various online forums. One issue is the TPM being found in the operating system or BIOS without the TPM being useable (e.g. TPM shows in Windows 10 Pro Device ...
7 votes
3 answers
6k views

How to enable BitLocker when booting Windows 10 from a non-Microsoft boot manager?

My setup I have ThinkPad P1 Gen 3 laptop and want it to dual boot Linux and Windows 10. For that I want to use a boot manager supporting both Linux and Windows; currently I'm using rEFInd. I also want ...
0 votes
2 answers
122 views

Is possible to know from MS Windows OS if dTPM or fTPM is used?

Is possible to know from MS Windows OS, if OS uses discrete TMP chip (dTPM) or fTPM (Intel PTT, AMD fTPM) without going to BIOS or peeking inside the computer case? E.g. when I open tpm.msc I see ...
2 votes
1 answer
4k views

Bitlocker: hardware or software encryption without a TPM?

I'm about to setup a Samsung 840 EVO SSD as the system drive with Windows 8.1 Pro, attached to an Asus P8Z68-V Pro mobo (which doesn't have a TPM). I'll also attach a Western Digital Black HDD for ...
0 votes
1 answer
395 views

Able to unlock BitLocker drive, but unable to obtain the 48-digit recovery key

I'm trying to obtain the 48-digit BitLocker recovery key from a failed drive. Here's what happened: Windows 10 Professional was installed on a Samsung 980 Pro 2TB drive. The login was a local user ...
1 vote
0 answers
106 views

Why does TPM think I installed a new CPU?

I disassembled then reassembled a computer, I rebooted and got a message saying that I installed a new CPU or reset the NV structure. I don't really think I did either, there was only one RAM slot and ...
2 votes
1 answer
140 views

Is TPM-only Bitlocker protecting multiple hard drives in case of a stolen computer?

How exactly does Bitlocker work in TPM-only mode, when I not only encrypt the boot drive but also other drives with data? If someone steals the whole computer he can't login, due to a windows password....
2 votes
1 answer
200 views

Cannot protect GPG key using TPM2 on Ubuntu 22.04

I'm trying to protect a GPG key using the TPM2 available on my laptop, but I'm not having any success. Probably I'm doing something wrong, but I cannot figure out what this is. My system is running ...
1 vote
1 answer
2k views

How to Enable Hard Drive Encryption with Seagate Constellation ES.3 SED Drive on AMI BIOS with TPM

I'm building up a new machine with a Supermicro MB equipped with a TPM and a Seagate Constellation ES.3 SED drive (ST200NM0053). The MB has the AMI BIOS which does see the TPM. I've installed ...
-1 votes
1 answer
84 views

Does the Samsung NP-RV711 laptop support Windows 11? [duplicate]

Holiday season is approaching - understand the maintenance season for my relatives’ computers 😅 I’ve been asked for support to reformat an old laptop from 2012. AFAIK it is still running Windows 7 to ...
0 votes
1 answer
310 views

Virtualbox TPM vs hosts TPM

Question: is the TPM option in virtualbox 7 an emulator? I want my guest OS to have NO access to the hosts hardware TPM, but instead to use a "portable" TPM from vbox, so that copying the ...
2 votes
1 answer
923 views

BitLocker can't enable encryption on this hardware encrypting drive volume because the drive bands couldn't be enumerated

I'm using Windows 11 Pro. I'm trying to encrypt an external HDD through BitLocker (Seagate One Touch w/PW SCSI), size: 2TB. My PC Specs: Error Message BitLocker can't enable encryption on this ...
1 vote
0 answers
95 views

Why the TPM PCRs does not consider a UEFI settings change? If someone resets CMOS, it's undetected

In my laptop I've set up a bios pw when I power on the laptop, and once I enter it the laptop starts my linux distro and decrypts the disk without asking any other password. To do this I've set up TPM ...
0 votes
0 answers
85 views

Why is my TPM bugged? If I enable checks on PCR 8,9,10, it ALWAYS asks for decryption password even if it shouldn't

I've also checked with systemd-analyze pcrs if PCRs are the same at every reboot, and they are. Only at first reboot I don't know why the only PCRs that change are 8,9,10 lol(I don't know why)... but ...
5 votes
2 answers
7k views

Listing content of a TPM 2.0 chip

I would like to list the information stored on a TPM chip, by type, just to see that all relevant data was migrated to a new machine before clearing the TPM chip of the old machine. I am not looking ...
0 votes
2 answers
3k views

BitLocker won't accept correct disk password after... something

The company I work for has computers with TPM chips and Windows 10 Enterprise, and uses BitLocker for full-disk encryption. They have BitLocker configured to require a password at boot (which I ...
2 votes
0 answers
965 views

Secure Windows SSH Key with Windows Hello / TPM

I want to secure my Windows SSH Key with Windows Hello (my fingerprint / TPM) instead of a simple passphrase. I found that OpenSSH can do this since v8.9 ( https://man.openbsd.org/ssh-keygen#...
1 vote
1 answer
816 views

LUKS encryption using passphrase + TPM

I have questions about secure boot and TPMs and I couldn’t find precise answers on the web, so I’m hoping someone skilled in this domain will be able to answer. In a case of an evil maid attack, what ...
0 votes
1 answer
3k views

The BitLocker encrypted logical drive of my laptop is not accessible. On clicking error appears,"Application not found"

I had an important personal data that was stored in my laptop drive 'F'. My 4 year old son also uses my laptop to play games. To secure my data I used bitlocker software that was already there in my ...
9 votes
5 answers
17k views

Do TPM modules only work for motherboards of the same vendor?

Most types of desktop computer parts are agnostic of the vendor. For example, you can use a DDR RAM from any vendor on a motherboard from any vendor, as long as they have the same standards. If I ...
1 vote
1 answer
6k views

Is there a TPM adapter for motherboards with no TPM header?

OK,... So I have a motherboard that is a bit old, meaning, I just do not have the funds to upgrade it, the Processor, and RAM to something comparable AND have the TPM SPI module interface pins. So my ...
0 votes
1 answer
393 views

How to interact with a TPM at boot time?

I'm currently experimenting with a minimal linux system built through Buildroot in which I want to use a TPM to derive a key and make some measurements during boot. At best, this would happen in the ...
3 votes
2 answers
8k views

How to set up a password to protect bitlocker key with tpm?

My computer is a dell xps12 (2013) laptop running on windows 8.1 pro, uefi and secure boot enabled. I successfully enabled tpm and encrypted system partition with bitlocker. I was a bit surprised it ...
0 votes
0 answers
1k views

Why could TPM be enabled in BIOS but not functional in OS?

If the BIOS of a computer system shows that TPM is enabled then one would think this would mean the operating system would be able to use the TPM. However, this is not necessarily the case. The ...
0 votes
0 answers
264 views

Dell Laptop without Service Tag and Tpm

I have the laptop Dell G3 15 3500. One day it start showing windows blue screen. When it starts a message appear with "ENTERING MANUFACTOR MODE". "No service tag is detected" ... &...
0 votes
1 answer
592 views

How to edit TPM-encrypted .vmx?

I am using VMWare Workstation 17 and am running an instance of Windows 11 on it. As per Windows 11 requirements, all the files (including the .vmx) must be TPM encrypted. I am trying to modify the '...
0 votes
0 answers
123 views

My TPM version isn't compatible with the windows 11 minimum requirements

The minimum requirement for Windows 11 is TPM Version 2.0, while my version is 1.2, I think that's why I didn't receive the Windows 11 update. I found an iso image of it, but is it okay to install it? ...
0 votes
1 answer
364 views

TPM clear on Bios not reset all accounts using PIN numbers

I have an interesting problem: Windows 11 Pro on 3 year old computer with TPM 2.0. Windows is updated to latest version, eset internet security , 3 user accounts, one local with admin rights, two ...
22 votes
1 answer
312k views

AMD fTPM - What does this firmware option do?

I have ASRock X370 Professional Gaming (AM4) motherbord with Ryzen 7 CPU. It has network firmware upgrade option, but I had to disable fTPM to enable network flash option. What exactly is fTPM option?...
0 votes
2 answers
2k views

Bypassing TPM/SecureBoot checks when installing Win11 without Rufus

I need to install Windows 11 on an older PC that doesn't support TPM and SecureBoot. According to this article, it's possible by creating DWORDs with the names BypassTPMCheck and BypassSecureBoot (...
0 votes
1 answer
272 views

GnuPG and TPM : IPC error

Ι installed the latest version of gpg in manjaro OS: $lsb_release -a LSB Version: n/a Distributor ID: ManjaroLinux Description: Manjaro Linux Release: 22.0.4 Codename: Sikaris and test tpm ...
0 votes
1 answer
2k views

Is there any risk in installing Linux without TPM - backdoor risk? ,Management Engine Technology [closed]

I have no confidence in this technique due to the risk of backdating. Are my concerns justified. Do I lose security by disabling this option in the bios? Windows requires this, but Linux does not. ...
0 votes
1 answer
2k views

Why was enabling tpm 2.0 wrong

As I said in this question, I enabled tpm 2.0 on my pc (a custom build with windows 10 on it), and, apparently, this messed up the filesystem or something and I get “WHEA_UNCORRECTABLE_ERROR” and “...
0 votes
0 answers
1k views

Windows 10 crashes after enabling tpm 2.0

MY PC AND WHAT I WAS TRYING TO DO I wanted to update from win 10 to win 11, and I read that, to do it, I had to enable tpm 2.0. The pc is a custom build and I have a meg z590 ace motherboard. Windows ...
0 votes
0 answers
324 views

Can we use the same Hyper-V Shieled VM certificate to create more Shielded VMs on a different host?

I had 2 shielded VMs on my Windows 11 prior to clean installing it. I had backed up the 2 certificates for signing and encryption. after importing them, I can access my 2 shielded VMs, no problem, but ...
0 votes
1 answer
35 views

Windows 11: a special requirement on the HW?

Is there some special requirement when I want to install and use Windows 11 on my PC ? May I delete my Windows 8.1 and simply buy a CD-ROM with 11 and in fact change no component, be it processor or ...
7 votes
5 answers
6k views

How to remove WebAuthN credentials from onboard-TPM on Win10 device?

Latest builds of Windows 10 allow browsers (at least Edge and Chrome) to use on-board TPM device for WebAuthN passwordless authentication. It does work for me and on test sandbox sites - I can ...
0 votes
2 answers
2k views

UEFI vs. ARM TrustZone

I understand UEFI has a Secure Boot feature that is now for all Win 8 (tablets, and smartphones). How does this fit in with AMR's TrustZone for example? Is UEFI like a firmware TPM that can sit as a ...
8 votes
1 answer
9k views

Got a Warning For Enabling Firmware TPM

I recently enabled Firmware TPM in my BIOS in order to see if my system is compatible with Windows 11. My question is about the following warning I got when I enabled Firmware TPM: Intel PTT is a ...
0 votes
1 answer
448 views

TPM 2 simulation with Windows 10?

I have an Asus Hero XI wifi with a 9900k but I never installed any TPM 2.0 chip (I confirm, there are no installed TPM 2.0 chip). I remarked that device manager is showing since a while a TPM 2.0 ...
0 votes
1 answer
10k views

How to disable Windows TPM without going into BIOS?

Ever since my purchase (In June 2022), my 2022 Zephyrus GA503RM (Laptop) has been experiencing a system-wide stutter. I found some threads and an official post from AMD that it's being caused by ftpm. ...
1 vote
1 answer
842 views

Allocate PCR banks for TPM in Linux

I want to have all PCRs (0-23) in sha1 and sha256 banks, but now I only have sha256 set and sha1 is empty but exists, tpm2_pcrread outputs: sha1: sha256: 0 : ...
0 votes
0 answers
134 views

Asus (Hero VIII) BIOS TPM stopped working

I have installed windows 10 on this PC a few times and upgraded to windows 11 once but now its not seeing the TPM settings System Info
19 votes
2 answers
43k views

What happens if I enable TPM on a running/already installed Windows OS?

Will I lose my files? Will Windows keep booting? I'm running Windows 10 without TPM enabled. My system supports TPM 2.0, but it's currently disabled, and since it seems that the new Windows 11 will ...
1 vote
1 answer
1k views

Is there any vulnerability if I encrypt disk with LUKS and TPM without specifying pcr_ids?

According to many tutorials on the internet, the process of adding a TPM-stored key to LUKS is to run clevis luks bind -d /dev/sda1 tpm2 '{"pcr_ids": "7"}', but I received the ...
1 vote
2 answers
2k views

Clean installed Surface Book can't find TPM module

I've cleanly installed Windows 10 on the Surface Book and even installed the official drivers package for the Surface Book but when I go to enable Bitlocker, I receive this message: "'This device can’...
1 vote
1 answer
4k views

Which TPM PCRs does Windows seal into the BitLocker password?

For example, does it seal PCR1 into the password? What about PCRs 2 and 3?
1 vote
2 answers
2k views

Windows 11 install with disable TPM and secureboot option for older computer

I try to install Windows11 pro on my old computer which is not meet the minimum requirements for windows 11. It does not have TPM (Trusted Platform Module). So, I try to install with Rufus 3.17 with ...