2 ms·

With enrolled keys and a password protected bios that refuses to add boot options to the boot menu, and refuse to boot existing options if the signature no long

by 1996 6y ago

With enrolled keys and a password protected bios that refuses to add boot options to the boot menu, and refuse to boot existing options if the signature no longer matches, you can't be booting malicious files.

Foxboron 6y ago
And that is what Secure Boot does for you. Not the TPM.
- 1996 6y ago
  And to do that, a TPM is needed to keep the keys/signatures