3 ms·

I will be avoiding Windows 11 for as long as possible. From my understanding, the issue is that you can only install Windows 11 on computers with a TPM, which t

I will be avoiding Windows 11 for as long as possible. From my understanding, the issue is that you can only install Windows 11 on computers with a TPM, which they then plan to use to shove DRM down your throat. No thank you. I should not have to "cam" my own computer, because my own computer wont allow me to capture whats visible on the screen. Fuck that.

WithinReason 4y ago
What happens if you remove/disable the TPM once windows 11 is installed? Will your computer become unusable?
- LeifCarrotson 4y ago
  Of course, it's no longer trusted - it can't query the TPM to verify that the firmware image it's trying to load matches the encryption key, so it will not boot. Depending on your settings, you may also be unable to decrypt the hard drive. That's the whole point of the TPM. Whether you think this is great because it protects you from really scary state-level actors modifying your firmware to log your keystrokes, or from yourself trying to install Ubuntu, depends on your threat assesment. Same with whether full-disk encryption protects you from Mossad determining what OS you're running or whether it prevents you from recovering your files after a software update wrecks the graphics driver. Fortunately, most new machines ship with UEFI secure boot disabled at this time, but that may change in the future. In theory you can use systemd-cryptenroll to add self-signed keys to the TPM so it boots only your Linux image (or your Linux image and your dual-booting Windows image) in practice it's a massive pain and a big risk of bricking your machine and almost no one bothers.
- timw4mail 4y ago
  No, if you don't have drive encryption enabled.
tomkarho 4y ago
Maybe, maybe not. I managed to disable TPM when installing Windows 11 on a virtual machine using a guide from Oracle of all places. > https://blogs.oracle.com/virtualization/post/install-microsoft-windows-11-on-virtualbox https://blogs.oracle.com/virtualization/post/install-microso... Don't know if this works for bare metal.

WithinReason 4y ago

What happens if you remove/disable the TPM once windows 11 is installed? Will your computer become unusable?

LeifCarrotson 4y ago
Of course, it's no longer trusted - it can't query the TPM to verify that the firmware image it's trying to load matches the encryption key, so it will not boot. Depending on your settings, you may also be unable to decrypt the hard drive. That's the whole point of the TPM. Whether you think this is great because it protects you from really scary state-level actors modifying your firmware to log your keystrokes, or from yourself trying to install Ubuntu, depends on your threat assesment. Same with whether full-disk encryption protects you from Mossad determining what OS you're running or whether it prevents you from recovering your files after a software update wrecks the graphics driver. Fortunately, most new machines ship with UEFI secure boot disabled at this time, but that may change in the future. In theory you can use systemd-cryptenroll to add self-signed keys to the TPM so it boots only your Linux image (or your Linux image and your dual-booting Windows image) in practice it's a massive pain and a big risk of bricking your machine and almost no one bothers.
timw4mail 4y ago
No, if you don't have drive encryption enabled.

tomkarho 4y ago

Maybe, maybe not. I managed to disable TPM when installing Windows 11 on a virtual machine using a guide from Oracle of all places. > https://blogs.oracle.com/virtualization/post/install-microsoft-windows-11-on-virtualbox https://blogs.oracle.com/virtualization/post/install-microso... Don't know if this works for bare metal.