Update. There were successful TPM attacks by sniffing data from LPC bus wires connecting TPM chip by HW logic analysers. The data is unecripted. "TPM2.0 devices

Update. There were successful TPM attacks by sniffing data from LPC bus wires connecting TPM chip by HW logic analysers. The data is unecripted. "TPM2.0 devices support command and response parameter encryption, which would prevent the sniffing attacks. Windows doesn’t configure this though,". This prevents bare-metal in datacenter use case. https://pulsesecurity.co.nz/articles/TPM-sniffing https://pulsesecurity.co.nz/articles/TPM-sniffing