> I want to be able to secure my computer (an ATM, say) against people with physical access to it. A root of trust (that the original purchaser of the device co

> I want to be able to secure my computer (an ATM, say) against people with physical access to it. A root of trust (that the original purchaser of the device controls) allows for that. Why not generate a unique key for each device on first boot? isn't it a fact that the original purchaser does not have control of the trusted computer platform. Trusted as in the OEMs trust they can control your computer.