2 ms·
So would it be more secure to enter in the bitlocker passphrase at boot rather than rely on tpm?
by fmakunbound 5y ago
So would it be more secure to enter in the bitlocker passphrase at boot rather than rely on tpm?
- staticassertion 5y agoIt depends. My expectation is that the TPM holds a key that's used for FDE, and if you have a password that password is used to get that key. So the password will only increase security if it's used to encrypt the TPM's key, but if it's just used to authenticate to the TPM, it wouldn't. Someone more familiar with TPM 2.0 could likely answer this authoritatively, but my assumption is that it's the latter. Properly leveraging TPM 2.0 features would likely be the best way to solve this problem.
- MonaroVXR 5y agoNot all laptops are the same, so it depends on the laptop as well.