Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
FineWolf
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
3 ms
·
1.
▲
by
FineWolf
1y ago
> But the article also says you can replace that public key, also they are from the motherboard, not CPU manufacturer. No. The article does state that EKs come from your fTPM, which is part of your CPU package. Without replacing your CPU
2.
▲
by
FineWolf
1y ago
The post does cover that briefly. > If the TPM is virtualised (vTPM), the EKpub and EKcert validation will fail, as the EK won’t be signed by AMD or Intel. Using `swtpm` will not give you the ability to create quotes of your PCR that are