4 ms·
> use TPM (PCR 7+11) with a PIN A power-on password (set in the BIOS) should also work, since without it the system will never get to the point where the TPM u
by currysausage 2y ago
> use TPM (PCR 7+11) with a PIN
A power-on password (set in the BIOS) should also work, since without it the system will never get to the point where the TPM unlocks the FVEK, right?
I prefer this setup to a Bitlocker PIN because I can use a fingerprint instead of the power-on password on my Thinkpad, and because it should make the device largely unusable to a thief.
Of course, power-on password and fingerprint auth are only as strong as my TPM, but the same goes for Bitlocker TPM+PIN, right?