2 ms·

What happens if you remove/disable the TPM once windows 11 is installed? Will your computer become unusable?

• LeifCarrotson 4y ago
  Of course, it's no longer trusted - it can't query the TPM to verify that the firmware image it's trying to load matches the encryption key, so it will not boot. Depending on your settings, you may also be unable to decrypt the hard drive. That's the whole point of the TPM. Whether you think this is great because it protects you from really scary state-level actors modifying your firmware to log your keystrokes, or from yourself trying to install Ubuntu, depends on your threat assesment. Same with whether full-disk encryption protects you from Mossad determining what OS you're running or whether it prevents you from recovering your files after a software update wrecks the graphics driver. Fortunately, most new machines ship with UEFI secure boot disabled at this time, but that may change in the future. In theory you can use systemd-cryptenroll to add self-signed keys to the TPM so it boots only your Linux image (or your Linux image and your dual-booting Windows image) in practice it's a massive pain and a big risk of bricking your machine and almost no one bothers.
• timw4mail 4y ago
  No, if you don't have drive encryption enabled.