2 ms·

TPM usage assumes Secure Boot though. It's fairly useless if you are booting malicious files.

• 1996 6y ago
  With enrolled keys and a password protected bios that refuses to add boot options to the boot menu, and refuse to boot existing options if the signature no longer matches, you can't be booting malicious files.
  • Foxboron 6y ago
    And that is what Secure Boot does for you. Not the TPM.
    • 1996 6y ago
      And to do that, a TPM is needed to keep the keys/signatures