3 ms·

Why disable the TPM? One cool thing you can do is store your SSH private key inside: https://blog.habets.se/2013/11/TPM-chip-protecting-SSH-keys-properly.html

• zelly 7y ago
  Yes but the TPM can only generate its own RSA key. You can't take an existing private key and store it in the TPM.
  • Thorrez 7y ago
    That's generally what you want. If the private key only ever existed in the TPM then you know there aren't any copies in an attacker's hands somewhere (ignoring hardware vulnerabilities). But if you copy a key into the TPM, there could have been malware that stole a copy of the key beforehand.