TPM

[FiveWiDi]

Hola a todos,

Tenemos acceso a TPM? Nos puede ser útil en algo?

Gracias

[Antonio Linares]

Carlos,

https://www.microsoft.com/en-us/research/project/the-trusted-platform-module-tpm/

The TPM is a low-cost, but powerful and flexible, crypto-processor. A TPM does many of the things that a smart-card or hardware security module (HSM) does – for example, it is able to create, manage and use cryptographic keys, as well as store confidential data. But a TPM is intimately tied into how a computer boots and runs, which means it is far more powerful and useful than a simple “smart-card on the motherboard.”

For example, platforms that incorporate TPMs “measure” and log the software that boots on the device. The resulting boot-log can be used to verify that devices are running known-software and are up-to-date using a TPM feature called quoting or attestation. The boot-log can also be used to protect keys for disk encryption, because the TPM incorporates a feature called sealing that can be used to make sure that the encryption key is only disclosed to authorized software, and not to disk-cracking tools.

Other advanced TPM features include a secure clock, monotonic counters, a non-volatile storage facility, and very flexible and secure mechanisms for key management operations like key import and export.

More information on how TPMs work and how that they can be used to solve common security problems can be found in A Practical Guide to TPM2.0.

[Rick Lipkin]

Carlos

As Antonio mentions .. TPM is a special memory chip that stores certain security information .. specifically a Bitlocker Encryption key. Historically, most Computers and laptops targeted for the consumer market did not come with a TPM chip and will be a BIG problem and impossible to upgrade to Windows 11.. even if you try the mainstream Reg Hacks ..

There are 2 versions of TPM 1.2 and 2.0 .. and Windows 11 wants to see TPM 2.0, however the Reg Hacks I just mentioned will allow TPM 1.2 to upgrade to Windows 11. With all that said .. TPM has traditionally been targeted at the Corporate Market specifically to facilitate Bitlocker HD encryption ..

Otherwise to me, TPM is basically worthless to the average consumer .. hence, not many mainstream computer equipment and gaming machines come with any TPM .. if you are lucky ... your ( recent ) consumer machine ( just might ) come with TPM but you need to make sure it is turned on in the Bios which is NOT turned on by default. If TPM is not turned on .. Windows 11 will not load.

and ... Windows Home version ( even if you have a TPM chip ) does not allow you nor, does it have a Bitlocker icon to encrypt the hard drive .. only Windows Pro has the ability to utilize Bitlocker.

Rick Lipkin

[FiveWiDi]

Muchas gracias a los 2 por la info.

[Antonio Linares]

Dato curioso que he intentado actualizar el Windows 10 (que usa Windows 365) a Windows 11 y me dice que no tiene TPM...

Asi que voy a intentarlo con este batch que me ha funcionado en el iMac 27 (usando bootcamp):
https://github.com/AveYo/MediaCreationTool.bat/blob/main/MediaCreationTool.bat

imposible de momento...

[Rick Lipkin]

Antonio

If the Host machine does not have TPM you can forget win10-win11 upgrade .. none of the hacks I have seen do not work on a machine ( host ) that does not have TPM .. Just for hoots and grins .. look in the Bios of your VM host .. TPM may be there but just turned off .. I have run into that situation a couple times.

Rick Lipkin

[Antonio Linares]

Rick,

It seems as you can buy a very cheap TPM module and install it on some computers:

https://www.amazon.es/seguridad-cifrado-tarjeta-compatible-dedicada/dp/B09HXB9TLG/ref=sr_1_1?keywords=Asus+Tpm+Module&qid=1636133935&sr=8-1