4 ms·
Do you have a source for Windows being able to use the TPM to attest the validity of the hibernation file?
by bonzini 6y ago
Do you have a source for Windows being able to use the TPM to attest the validity of the hibernation file?
- deleted 6y ago[deleted]
- jeroenhd 6y agoThe TPM and TPM state are used to unlock the filesystem that contains the hibernation file. If the TPM state is altered, Bitlocker won't boot without a recovery key. Unencrypted Windows installations do not validate the hibernation file as far as I know. Then again, encrypting Windows is a lot easier than setting up TPM encryption on Linux. On Windows it's just a button, "enable Bitlocker". On Linux, you're reinstalling if you didn't enable encryption on startup or messing about with moving files in between encrypted and and unencrypted partitions, followed by random tutorials or Github shell scripts to enable the TPM. Or, if you don't care about the easy of use of the TPM, enter a passphrase during every boot. However, even on unencrypted Windows, you never needed to disable the system enforcing signature checks just to enable hibernation.
- my123 6y agoWithout drive encryption, you cannot ensure that you have a secure system.