2 ms·
The TPM combined with secure boot will only unlock the disk if nothings been tampered with, meaning your OS security is intact. If you switch off secure boot or
by mnd999 5y ago
The TPM combined with secure boot will only unlock the disk if nothings been tampered with, meaning your OS security is intact. If you switch off secure boot or mess with the kernel or boot loader it’ll just refuse to unlock.
I would guess extracting the keys from the tpm in other ways is not impossible, but probably sufficiently hard to be not worth it in most situations.
- arthurcolle 5y agoSo if you modify any components in a laptop, say RAM or a video card, or you you mess with any BIOS settings, it won't boot? is this for real...?
- orra 5y agoNo, you misunderstand. The TPM verifies the bootloader and the operating system kernel, etc: that those components haven't been altered.
- Grimm665 5y agoNo, I think you might be mistaken. I have been bitten by this when doing a simple BIOS reset for a computer that was having charging/battery issues. Resetting the BIOS tripped Bitlocker, which I did not configure or enable, it was enabled after doing the initial Windows 10 setup. Since the account was a local account, not one signed into a Microsoft account, the Bitlocker keys were not backed up an all data was lost. I was stunned, I've been doing laptop repair for almost 10 years and I've never seen something this stupid.