Questions tagged [tpm]

TPM (Trusted Platform Module) is both the name given to a published specification detailing the characteristics of a criptoprocessador safe, capable of storing cryptographic keys that protect information and the general name of implementations of this specification, often called "TPM chip" or "TPM Security Device".

Filter by
Sorted by
Tagged with
15
votes
4answers
44k views

Clearing TPM does not ask for new password, but “change owner password” asks for the old one

I recently cleared my TPM (Dell e7240, Windows 10). During the process, at no point did Bios or Windows ask for a new TPM password. (And at no point since I bought this laptop did I ever set a TPM ...
9
votes
2answers
3k views

Full Disk Encryption with TPM, not subject to cold boot attack

Here's a passage from Wikipedia on BitLocker Once a BitLocker-protected machine is running, its keys are stored in memory where they may be susceptible to attack by a process that is able to ...
7
votes
2answers
22k views

Will clearing the TPM make BitLocker encrypted data unavailable?

I've learned in this answer that starting with Windows 10 v1607, Windows will not allow to set, save or change the TPM owner password by default. So the option to reset a TPM lockout by entering the ...
6
votes
2answers
63k views

How do I enable TPM in the BIOS?

I have a new motherboard (Asus Sabertooth Z87) which cliams to support TPM. However, when I attempt to enable TPM - I don't see an appropriate setting in the BIOS. Obviously I'm looking for something ...
6
votes
2answers
3k views

Is Linux full-disk encryption with seamless user experience ala FileVault (macOS) or BitLocker (Windows) possible?

I've found some full-disk encryption (FDE) solutions for Linux OSes. Specifically, I've looked at solutions that work on Linux Mint or Ubuntu, since that's what I tend to use. But I'm sure this ...
5
votes
3answers
34k views

How do I get a TPM module for a motherboard that does not already have one?

I have an ASUS P8P67 DELUXE motherboard, which (as far as I can tell) does not come with a TPM module, so I can't use BitLocker without a PIN or USB key. Is there any way to buy and install a TPM ...
5
votes
3answers
6k views

How to verify the presence of a TPM (trusted platform module) in my laptop

I have a Windows 8 laptop I will soon be upgrading to Windows 8.1. The standard Version of 8.1 allows for disk encryption if your PC has a TPM chip. How do I detect this chip in my Windows 8 PC?
5
votes
1answer
2k views

Unable to execute “TPM 1.2 Update” on Ubuntu (XPS 13 9350): This TPM is Owned

My Ubuntu 17.10 is showing a TPM Update (1.2, 5.81.0.0 -> 5.81.2.1) for a couple of weeks or months now but when I restart the machine it's unable to execute the firmware update successfully. Error: ...
5
votes
1answer
1k views

Benefits of a Trusted Platform Module for a home user?

I'm a reasonably computer-savvy user who dual boots Linux and Windows 10, and I'm interested in security against malware, remote exploits, etc. on my home desktop. At least in theory, could a Trusted ...
5
votes
2answers
10k views

How do I tell if a laptop has a TPM without buying it first

With TrueCrypt not officially supporting Windows 8 yet, Bitlocker appears to be the default option for full disk encryption on a new laptop. However, Bitlocker suffers a major usability degradation ...
5
votes
2answers
61k views

What does a TPM error message when booting mean?

I have a Gateway MT6728 laptop I was given to have, if I could fix it. When the computer boots, it displays the message: No TPM or TPM has problem. Allegedly, this problem occurred after browsing ...
5
votes
3answers
5k views

Can I use the TPM on linux without TrustedGrub?

I'd like to use the TPM to secure my boot process for my linux laptop. Any manual, howto or tutorial I have found about this topic mentions I have to use the TrustedGrub bootloader to keep up the ...
4
votes
2answers
7k views

Which desktop computers have a TPM chip? [closed]

My company employs Bitlocker w/ TPM in order to enable Direct Access so that you are always on the company network even when away from work. I want to have a desktop at home which is always connected, ...
4
votes
4answers
74k views

Cannot Enable BitLocker After Re-Installing Windows, TPM Module Not Found

I've got a Dell Latitude D620 that I just recently re-installed Windows 7 on. The BitLocker wizard reports the following error when I open it. A compatible Trusted Platform Module (TPM) Security ...
4
votes
3answers
10k views

Why very few modern motherboards are equipped with TPM? [closed]

I've heard bitlocker will be so common that microsoft will require every computer to have TPM to run windows 9. Yet I just called gigabyte. Gigabyte says that not one of their motherboard is equipped ...
4
votes
1answer
8k views

How to enable Bitlocker without TPM

HP Pavilion complains about Bitlocker saying TPM is not found. Is there a setting that I need to enable in the motherboard or is there an update for it?
4
votes
1answer
266 views

Bitlocker USB-Key and harddrive stolen, data still secure?

my Laptop without TPM was stolen. The USB-Key was connected to the device. Can the robber with the usb-key access my data? I have protected my windows account with a password. It is possible to access ...
4
votes
1answer
4k views

How to use OpenSSL with openCryptoki and software TPM?

I would like to make work OpenSSH with OpenSSL plus openCryptoki (pkcs11) plus a software TPM. As far as I have understood, openCryptoki is capable of software token (for test purpose). I would like ...
3
votes
2answers
2k views

How does deactivating TPM in the T480 UEFI settings affect bitlocker? Is the TPM cleared?

My Lenovo T480 runs a Bitlocker protected Windows 10 installation. Bitlocker is configured to lock the system (request the passkey) if there are any hardware changes. I would like to keep the ...
3
votes
4answers
9k views

Detecting a TPM chip?

I have a HP Mini 311-1000CA netbook running Windows 7 Ultimate. I'd really like to encrypt the harddrive using BitLocker but I am unsure as to how to work out if the Mini has a TPM chip or not. Any ...
3
votes
3answers
623 views

Setting up most secure personal computing environment possible

I'm trying to set up the most secure personal computing environment possible with the following requirements: most secure OS(in relative terms) that is freely available(I'm guessing FreeBSD) read-...
3
votes
3answers
8k views

What is the difference between various TPM modules?

I was looking for a TPM 2.0 module for my Gigabyte Z87MX-D3H and I found that the brand of the module is not important. The ones I found are: ASUS TPM-M R2.0 14 pin Asus TPM-L R2.0 20 pin Asus ...
3
votes
2answers
1k views

Do TPM modules only work for motherboards of the same vendor?

Most types of desktop computer parts are agnostic of the vendor. For example, you can use a DDR RAM from any vendor on a motherboard from any vendor, as long as they have the same standards. If I ...
3
votes
1answer
5k views

How to adjust TPM lockout?

I use bitlocker in combination with a TPM on Lenovo T410. The TPM seems to trigger a lock-out after one incorrect password attempt which annoys me to no end. How can I adjust the TPM lockout threshold?...
3
votes
2answers
800 views

Data protection on HDD: trying to sort out relevant technologies

I'm trying to understand how I can protect data from being used if a computer or a hard drive disk is stolen. I'm looking for reasonable protection against non authorized access to private data (...
3
votes
1answer
79 views

Use Windows Hello Face recognition without TPM chip

Is there any possible way to use my IR-Webcamera for windows hello login without a TPM chip on my motherboard? I had this setup WITH a TPM 2.0 before but something went wrong and the TPM is not ...
3
votes
1answer
4k views

TPM not found on Surface Pro 3

When I tried booting my device today, I got to the BitLocker Recovery. After entering the key my Surface Pro 3 booted up normally. However, when I rebooted the device I got again into the BitLocker ...
3
votes
1answer
430 views

How can Windows boot with Bitlocker after clearing the TPM?

After installing Windows, I turned on Bitlocker for a full C:\ drive encryption. I saved the recovery keys and then let Bitlocker proceed with encrypting the full drive. When I rebooted, I was ...
2
votes
4answers
13k views

How do I wipe a drive (currently a Win 7 primary drive) locked with BitLocker?

I have a company laptop, whose one and only hard drive was encrypted with Bitlocker. I have tendered my resignation with that company and they immediately used the remote security policy to lockout my ...
2
votes
1answer
726 views

Is a TPM module usable as a physical key between 2 identical computers?

If I have 2 identical machines, can I use the same physical TPM 2.0 module in either, if I transfer both the SSD and the TPM module at the same time? My motherboard (Asus B150M-A) has a TPM header, ...
2
votes
1answer
1k views

Why don't consumer laptops have trusted platform modules (TPMs)? [closed]

I've noticed that only "business laptops" (eg. Dell Latitude series, Lenovo ThinkPad T or W series, etc.) tend to have trusted platform modules (TPMs). In today's world, security is not a business-...
2
votes
1answer
2k views

Can I save a LUKS (or other encryption) passphrase or key in the TPM?

The spec is rather complex. The software is rather sensitive, so I keep it on an encrypted volume. My assumption was SecureBoot with my own Platform Key to ensure only my signed boot-loader runs, and ...
2
votes
0answers
231 views

(Dual boot) Windows 7 asks for recovery key after update

I have an HP Zbook 15 G3 with 2 x Samsung SM961 nVME SSD's installed. One SSD has Windows 7 Ent installed and is protected by BitLocker. The second SSD has Windows 10 Ent installed but is not (...
2
votes
1answer
185 views

Can BitLocker be forced not to use the TPM when one is available?

I have a Dell D420 laptop. I want to encrypt my Windows 8.1 installation using BitLocker, however this computer appears to have a TPM installed and I do not want to use it. BitLocker keeps telling me ...
2
votes
1answer
3k views

How to set up a password to protect bitlocker key with tpm?

My computer is a dell xps12 (2013) laptop running on windows 8.1 pro, uefi and secure boot enabled. I successfully enabled tpm and encrypted system partition with bitlocker. I was a bit surprised it ...
2
votes
0answers
369 views

If TPM owner password set in linux, how to enter owner password in windows to enable bitlocker?

I have successfully taken ownership of, and used various features of, my tpm in linux, using tpm_takeownership and related applications. Now when I try to enter the owner password in windows to ...
2
votes
1answer
3k views

Bitlocker: hardware or software encryption without a TPM?

I'm about to setup a Samsung 840 EVO SSD as the system drive with Windows 8.1 Pro, attached to an Asus P8Z68-V Pro mobo (which doesn't have a TPM). I'll also attach a Western Digital Black HDD for ...
2
votes
1answer
2k views

Dell Vostro suddenly giving “No TPM or TPM has…” message on boot

(Original question title was Dell Vostro suddenly giving "No TPM or TPM has problem" message on boot" but I was pinged by the stack exchange style police for having the word "problem" in my title!) I ...
2
votes
1answer
467 views

How to I set up the TPM module to give the correct password to the hard drive?

I have bitlocker encryption set up on my system's hard drive. I had a few problems with the computer, and I turned it in for warranty service. It turns out that in the service center they replaced my ...
2
votes
1answer
9k views

Installing Bitlocker on Windows 7 with TPM version 2.0 chip

We are trying to turn on bitlocker with Windows 7 where the laptop is new and has a TPM version 2.0 NOT 1.4 chip in it. We cannot upgrade to Windows 10 due to company policy rules and we have tried ...
2
votes
2answers
741 views

Does Windows BitLocker reduce system performance

I found that my computer has a TPM module to work with BitLocker but now I'm trying to see if it may reduce my system performance... There's my spec: Intel Core 2 Duo 3.0Ghz (VT-x) 2GB of DDR2-800 ...
1
vote
1answer
4k views

How to backup before clearing TPM

The Windows Defender Security Centre is asking me to update TPM which requires Clear TPM. And above the Clear TPM button, there is a text says ... Ensure you back up your data before clearing the ...
1
vote
1answer
132 views

Save TPM initialization key, re-initialize, then restore

From what I've read, when you initialize a TPM chip it creates a random derived key (derived from its implicit root key). Other users will then set PCRs (i.e. UEFI, bootloader, etc), and eventually ...
1
vote
1answer
230 views

Getting data off Bitlocker drive restrictions where Bitlocker uses TPM and no password

I'm exploring the security of Bitlocker when combined with TPM and secure boot (and no password for Bitlocker or BIOS), and am struggling with something - Does/How does Windows protect the early boot ...
1
vote
1answer
79 views

How to stop Gigabyte Designaire X399 / Threadripper 1920x from crashing on resume from sleep with TPM enabled?

When I try to put my Windows 10 (version 1809) PC to sleep, it will not resume correctly, and seems to wipe the TPM settings, meaning I have to recover using my Bitlocker recovery key. Is there ...
1
vote
1answer
3k views

Win7 --> Win8 = Bitlocker won't ask for password

I have a Dell E6520 laptop with a TPM. It had Windows 7 Enterprise x64. The C (boot) partition is encrypted with Bitlocker. Bitlocker would prompt me for a password after POST, and after I entered ...
1
vote
1answer
128 views

How to clear TPM 2.0 on Dell Inspiron 15 with recent BIOS?

I have a Dell Inspiron 15 (7577), service tag HG6D142, with BIOS version 1.8.0. I wanted to issue Clear TPM command from Windows 10 (build 1903), but this appeared: Clear TPM - device does not ...
1
vote
1answer
56 views

How to make Bitlocker recovery password unreadable/unrecoverable?

I use TPM2.0 + Bitlocker + PIN to encrypt SSD with Windows 10 Professional. I have backed up recovery password and continued. After the encryption complete and two reboots behind I can write in ...
1
vote
1answer
250 views

Which TPM PCRs does Windows seal into the BitLocker password?

For example, does it seal PCR1 into the password? What about PCRs 2 and 3?
1
vote
1answer
162 views

How to perform TPM firmware upgrade on latest Windows 10?

I have several HP desktops running latest Windows 10 and requiring a TPM firmware upgrade (sp82407.exe) to fix last year's faulty Infineon crypto vulnerability. The updater requires the TPM to be ...