4 ms·
I bypassed the checks and installed in a Virtualbox a month or so ago, and it's been updating just fine. I don't see them seriously blocking non-conforming ins
by nly 5y ago
I bypassed the checks and installed in a Virtualbox a month or so ago, and it's been updating just fine.
I don't see them seriously blocking non-conforming installs as it would essential rule out all virtual machines.
- londons_explore 5y agoThere are various 'passthrough' approaches to let a virtual machine have access to the hosts TPM. In the future, that may become mandatory.
- nly 5y agoI don't see the point in this at all. There's no way for software to authenticate what is and isn't a legitimate TPM, that's not how they work.
- londons_explore 5y agoLook up "device attestation". It basically let's software verify its talking to a hardware TPM made by a whitelisted manufacturer rather than an emulated TPM. All kinds of DRM schemes want to do that to be sure they can't be run in an emulator.
- nly 5y agoDevice attestation just proves you have realtime access to a legitimate device, and only makes sense where the other end of the transaction is trusted. Locally running software is never trusted. Its uses are mostly confined to authentication between corporate issued laptops and corporate VPN servers.