What is a Trusted Platform Module (TPM)? Protecting your PC and data through hardware encryption

Поделиться
HTML-код
  • Опубликовано: 27 окт 2024

Комментарии • 140

  • @Grimoor
    @Grimoor 3 года назад +31

    thank you for this knowledge, now half the world needs these modules.

  • @khiemtran6236
    @khiemtran6236 3 года назад +7

    Why can’t all RUclips videos be this short and sweet. Thanks, totally worked

  • @jimmylewis6070
    @jimmylewis6070 Год назад +2

    I just built a system with the X570-pro, saw this TPM header and bought a module to fit it just to see what it does. After watching your very informative video, I understand what it is now (lol) and what to do with it. I shall explore it more. Thanks for the video!

  • @cainabelcybersecurityenesp7476
    @cainabelcybersecurityenesp7476 3 года назад +5

    Exactly what I was looking for. Quick and easy explanation. Thanks!

  • @scipionyx
    @scipionyx 3 года назад +3

    This, this was super simple and well put, really like the video format, keep at it!

  • @Rogue_Boone
    @Rogue_Boone 2 месяца назад +1

    Really nice explanation and I like how you tested it just because you were curious.

  • @BensTechLab
    @BensTechLab 3 года назад +8

    Glad to see you diving into security and trust! This is really trending in the workplace in the last year to keep work computers secure and reducing the potential issues when recycling old computers/harddrives with work data on them.

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      Thanks! The tpm is def an interesting thing. It’s a pretty powerful thing in terms of protecting your data and not for not a lot of money! These maybe max out at 20 bucks if that.

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад +1

      Ben, this video is blowing up because of win 11! Love it!

    • @lenny108
      @lenny108 2 года назад

      An SSD encrypted with Bitlocker with TPM protection can be cracked relatively easily. So what's the point with this nonsense?

    • @BensTechLab
      @BensTechLab 2 года назад

      @@lenny108 Do you have a reference to point us to showing a bitlocker drive being cracked? My understanding is the only method of cracking would be brute force cryptography.

  • @gengpan
    @gengpan Год назад +1

    so if this card is broken some day, the system is forever locked?

  • @BrucifyMe
    @BrucifyMe 8 месяцев назад +1

    Love your presentation. Came here from your video about the MSI B550M Pro. Subscribed!

  • @Rhino95X
    @Rhino95X 3 года назад +3

    I first heard of the tpm mod from your vid on x570, glad to see this follow up - 🌻🦈

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад +1

      Thanks! Glad you watched it. Hope I was able to provide some information. It's an interesting thing, and I may dive more into it if I can get more information on functionalities beyond bitlocker.

  • @SigSarge1
    @SigSarge1 3 года назад +1

    Outstanding presentation. Was looking "for add a TPM chip to a HPE H8-1380T CTO DESKTOP PC". Now I shall call HP for that specific information. Security is of essence now-a-days, especially for us Small Business Owners.

  • @ArianRiv
    @ArianRiv 3 года назад +1

    Thank you for the information, it helped a lot! Also nice t shirt! good to see a DC fan. Btw would you mind sharing your wallpaper? Thanks!

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      Thanks for the compliment. :) I love DC for sure. Been collecting on and off since 1989. My wife got me a slew of DC t-shirts for my birthday this year.
      I believe this is the link I used for my wallpaper. I have a 1440p monitor so I wanted something larger than 1080p. You can also google, Superman Abstract Wallpaper to get it to show up in results. hdwallpaperim.com/abstract-superman-the-movie/

  • @kevindeng1889
    @kevindeng1889 3 года назад +1

    Newhail Lauched TPM2.0 Module TPM SPI 12Pin Module with infineon SLB 9670 for Gigabyte Motherboard,we tested,it is worked.

  • @colinlarson9656
    @colinlarson9656 6 месяцев назад +1

    Great video, just the meat and potatoes, no unneeded content.

  • @photizomediallc7144
    @photizomediallc7144 3 года назад +7

    Great video! Windows 11 will require TPM 2.0 to be enabled. Thanks for your helpful links. : - )

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      You’re very welcome!

    • @soundspark
      @soundspark Год назад

      Note that 6th Gen and newer Intel has a firmware option, though they check for 8th or greater.

  • @jaydenritchie1992
    @jaydenritchie1992 Год назад +1

    hey man, im still learning but i think you can muck around with secure boot keys, i think this is where retail or oem version of windows determines how secure you can wrap the tpm but i could be wrong

  • @tuhin7ryt
    @tuhin7ryt 3 года назад +2

    Thanks . this video gonna viral soon. take love.

  • @readynas7812
    @readynas7812 3 года назад +1

    Thank You Middle of Knowhere, got my tpm to work on win srv 19.

  • @MohammadOmarAra-du5lg
    @MohammadOmarAra-du5lg 7 месяцев назад +1

    You presented really well , Thank you

  • @diegoalbertson8777
    @diegoalbertson8777 3 года назад +2

    Gracias por la info y contar tu experiencia!!

  • @philgreek7483
    @philgreek7483 2 года назад +1

    Hi. I have a question regarding the TPM?
    If my pc broke down and I want to get some files on the Hard-drive can I still access the files when I transfer to my other PC the Hard drive?

  • @Sjokoting
    @Sjokoting 3 года назад +1

    Thank you for this video. You will be sure to get a lot of new views now that windows required this.
    I was lucky to fint and asus 20-1 pin for 1.68 buck 4 days ago. It now of the time of wring over 100 bucks on ebay!!
    Got it today, and seems to be working !

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      Thank you! Wow only $1.68? That's a great price!I think mine cost 12 or 17 bucks when I bought it last month, but still way better than 100 that scalpers are selling for. Glad it works for you! TPM is definitely an interesting thing to tinker with.

  • @reyestrada3295
    @reyestrada3295 3 года назад +8

    I was able to install Windows 11 by just enabling the AMD fTPM in my BIOS. I didn't install any chip.

    • @jacobbrown8561
      @jacobbrown8561 2 года назад +1

      Your situation isnt the same as everyone else simply because... What I mean is... your Manufacturer's Motherboard isn't the same as an:
      *ASROCK B450 SteelLegend.
      ^^^ (*) Updated to latest BIOS... there won't be any of what YOU have JUST mentioned.
      "ONE OF THESE" motherboard "chips" MIGHT be ONLY solution for SPECIFIC mainboards. Friendly F.Y.I.

    • @Sprinkleycakes
      @Sprinkleycakes Год назад

      While the original comment gets me excited because I love virtualization in all its glorious forms, the reply just tickles me 😂 nothing trumps the helpful shade of techies ❤❤

  • @b-reel
    @b-reel 3 года назад +2

    You must have worked for Microsoft getting this before Win 11! Kidding, great vid and thanks

  • @Foxinuhhbox
    @Foxinuhhbox 3 года назад +4

    for those just showing up, it is required to have a tpm for windows 11. good luck finding a 20 pin connector if you are one of the unlucky few such as I. with a motherboard pre 2016

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад +3

      I did not know the tpm was required for win 11. Was this just announced? Seems odd considering modern motherboards like the rog Strix b-550-f gaming, which is just did a deep dive vid on, doesn’t have a tpm header.

    • @Foxinuhhbox
      @Foxinuhhbox 3 года назад +3

      @@MiddleofKnowhere it’s on the Microsoft requirement page and they tell you if you are compatible via a pc health app. It’s there way trying to get people to buy new computers and shit. It’s also a pretty good reason to change the name since it requires different specs to run the os. I’m going to start a conspiracy theory that there aren’t very many tpm modules to buy Bc they don’t want you to buy them and upgrade. Anyway hope you get the chance to install one

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад +1

      Hey thank you for the information. This is def getting me very curious. I was able to install the one for my dark hero and activate it in the bios super easy. I just haven’t kept up on win 11 this week much. Been pretty sick and then today in ESO midyear mayhem started, so I’ve been pvp’ing like crazy today after work.
      I read an article too about trying to get tpm 2.0 vs 1.2. I assume 2.0 is more secure. Hope people can get the modules and those with laptops have them integrated.

    • @Grimoor
      @Grimoor 3 года назад

      @@Foxinuhhbox tpm 1.2 is the base minimum, but reading the requirements at a glance it says 2.0 is required, but look around while your there you will find it.

  • @technickuk
    @technickuk 3 года назад +2

    Very informative video. Only thing you didn't explain (or I missed it!) is why you didn't just enable and use the CPU firmware's TPM. That is, was there a specific reason you chose to install and use a plug-in TPM?

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад +5

      Hi and thanks for watching. Yep I chose the physical one because of my curiosity. I just wanted to know what went into the tpm header and what it could do. Then I decided to share what I found out through research and doing with you all. :) this video really just served as an outlet for that curiosity and what I learned hoping it would help or inform others. I never dreamed MS would end up making TPM a requirement for win 11 a month later resulting in the video blowing up.

    • @jeyfii
      @jeyfii Год назад

      @@MiddleofKnowhere Hello, first of all, the video was interesting and informative, but I was left wondering if, once the TPM module is installed, is it necessary to disable AMD ftpm? From already thank you very much, greetings.

  • @soundspark
    @soundspark Год назад

    Locking the drive with password doesn't use the TPM. BitLocker only uses the TPM if you encrypt the system drive.

  • @ma.nu.22
    @ma.nu.22 2 года назад +1

    would be cool if you actually tried to test the security featueres. ie. take the hdd out and put it in another pc and see if the tpm did anything to secure the data on the drive or not.

  • @jirehla-ab1671
    @jirehla-ab1671 3 года назад +1

    Do u think tpm will prevent IT scanners from getting info of my bank account in a remote session?

  • @PWingert1966
    @PWingert1966 3 года назад +2

    Over the last week, I have seen TPM's prices go from $9.99 to over $250

  • @absurdbird3556
    @absurdbird3556 2 года назад +1

    Thanks for doing this, I just bought the exact same module, as FW-TPM seemed like a recipe for data loss (data dies with CPU!). I have a question, if I upgrade my computer motherboard or CPU and want to use the same drive, can I move the physical TPM into the new machine and us the same drives?

    • @MiddleofKnowhere
      @MiddleofKnowhere  2 года назад +1

      Only if the motherboard has the same Tpm connection as far as I’m aware. Like an asus to asus board with the same 14-1 pin layout. I honestly would decrypt the drive then move everything then re-encrypt, but that’s me and I’m a total noob to this. Thank you for watching!

  • @AweEmperorofChickenKilling
    @AweEmperorofChickenKilling 3 года назад +1

    thanks for the helpful video

  • @sherifmazhar
    @sherifmazhar Год назад +1

    Thanx for the video,
    Maybe one day but not for now

  • @jerroei
    @jerroei 3 года назад +1

    Thank you Sir !

  • @frankrodrigues645
    @frankrodrigues645 3 года назад +2

    Yes! Very in inform n need to get one for my Asus mb

  • @mapache-ehcapam
    @mapache-ehcapam 3 года назад +2

    So... if I want to remove my hard drive that was being used on a motherboard with the TPM enabled, how do I use it on another PC?

    • @PhrontDoor
      @PhrontDoor 3 года назад +3

      In that case, you will be prompted for a "recovery key" -- enter that correctly, and voila -- you can use the drive.

    • @mapache-ehcapam
      @mapache-ehcapam 3 года назад +1

      @@PhrontDoor And where and when do I get that key?

    • @PhrontDoor
      @PhrontDoor 3 года назад +1

      @@mapache-ehcapam It should be displayed and saved when you enable bitlocker encryption.

  • @caviddjavadkhanov7954
    @caviddjavadkhanov7954 2 года назад +1

    If you remove drive letter via disk manager, your drive will be invisible to anyone

    • @MiddleofKnowhere
      @MiddleofKnowhere  2 года назад

      That's kinda cool. How do you see it then to use it?

    • @caviddjavadkhanov7954
      @caviddjavadkhanov7954 2 года назад

      @@MiddleofKnowhere www.google.com/amp/s/www.easeus.com/amp/partition-manager-software/hide-drives-windows.html

  • @1eskip
    @1eskip 3 года назад +1

    Thank you very much for the information. I had already done a Research myself, but it struck me how little information is actually available. My HP x360 laptop also has one built in and just like your experience, I've seen it come up a few times, but have no idea what it's for. And now on my Asus z170 Pro there is also a connector, but in both the manuals or their website I couldn't find anything useful at all. But I'm going to have a look at your links right away, hopefully I'll learn something from that. I do have one more question. How does it work if you have multiple systems with a rpm chip. Is this somewhat synchronized.

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      That's a great question. I think I understand it if you have let's say 3 systems with TPM enabled and they're on a network with 1 unified password type thing? Honestly, I've have no idea how that would work, lol. You're right when saying there is very little information, and definitely not enough on how to set things up and what all you can do when you have a TPM.
      Thank you for watching!

    • @1eskip
      @1eskip 2 года назад

      @@MiddleofKnowhere youre welcome

  • @jeyfii
    @jeyfii Год назад

    Hello, first of all, the video was interesting and informative, but I was left wondering if, once the TPM module is installed, is it necessary to disable AMD ftpm? From already thank you very much, greetings. 🙂

  • @stefandjordjevic9
    @stefandjordjevic9 3 года назад +1

    Nice video. Tnx

  • @PWingert1966
    @PWingert1966 3 года назад +1

    Time to make a new video talking about Widnwos 11 which now requires TPM 2.0

  • @yoanzaky6310
    @yoanzaky6310 3 года назад

    HI,,, I have turned on the TPM, and enabled trusted computing
    my spec are:
    ryzen3 3100
    b450i aorus itx
    8x2 ddr4 ram
    but still not compatible for win 11, any suggestion? thx

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      What does the health test thing say to see if you can install windows?

  • @Hanzedous
    @Hanzedous 3 года назад +2

    Prepare for a ton of traffic from people interested in upgrading to windows 11. Hopefully I can figure out how to go about this in my Alienware Aurora R10

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      Why? What does the tpm have to do with win 11?

    • @BigBadLion
      @BigBadLion 3 года назад +1

      @@MiddleofKnowhere Computers will need to have a TPM 2.0 if they want to upgrade to Windows 11. (great video btw)

    • @Hanzedous
      @Hanzedous 3 года назад

      @@MiddleofKnowhere Microsoft is forcing it going forward. The Alienware representative I messaged seemed to think that there may be some kind of software based solution (from AMD?). I honestly don't know enough about the topic to know if the CS rep actually knew what they were talking about.

    • @Hanzedous
      @Hanzedous 3 года назад

      Update. After rewatching your video I found that I do actually have a Tpm so when the Windows 11 test flights launch I will be ready.

  • @diehardfans
    @diehardfans 2 года назад

    i still can use bitlocker without TMP, is that means TMP is a second security to access hard disk?

    • @MiddleofKnowhere
      @MiddleofKnowhere  2 года назад

      If you have firmware tpm (fTPM) enabled it will act the same. FTPM is software based on the cpu. Just depends on which cpu you have that has that. But yeah I think TPM would be a second layer.

  • @sourendey820
    @sourendey820 3 года назад

    Can i install any tpm module if i have a tpm header in my motherboard???
    I have a msi b45 motherboard and i need yo install a asus tpm 2.0 module.. your answer will help a lot

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад +1

      If you have an MSI b450 motherboard you'll need to look it up on the MSI site and find the correct TPM to use in it. Don't use the ASUS one. You need to match the TPMs as far as I'm aware.

  • @gengpan
    @gengpan Год назад

    does this module work like app 1password?

  • @tomwhittington4054
    @tomwhittington4054 3 года назад

    I DO HAVE A T SHIRT LIKE YOUR AND PEOPLE'S DO LOVE IT

  • @johngoard8272
    @johngoard8272 3 года назад

    Seth I am not that tech savvy so what I would like to know is if I encrypt my C: drive when I power on the machine will it boot as normal or will I get a prompt to enter that password??

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      I'm thinking you'd need to enter a password. It's seems kinda like adding a PW to your user profile when you boot the machine up.

  • @VampiresCrypt
    @VampiresCrypt 3 года назад +2

    Gamers just want to upgrade to Win11 and now they are confused about TPMs xD

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      pretty much. That you can do it on a CPU level though with a firmware version is probably best for people not actually going to utilize all a TPM can do.

  • @shifureisaikyou2055
    @shifureisaikyou2055 3 года назад

    The endorsement key(the preinstalled private key)that can't be removed is problematic for security. we do not know how the manufactorer created it secored it or if it has acces to therefore it is a perputual security risc

  • @arunfernandez1999
    @arunfernandez1999 3 года назад

    wiondows 11 reqire's this TPM 2.0 or windows 11 would not install at all how much is it's price ???

  • @j.lietka9406
    @j.lietka9406 Год назад

    Can the TPM chip on a laptop mobo be replaced via BLR?

    • @MiddleofKnowhere
      @MiddleofKnowhere  Год назад +1

      I do not know. It could be soldered on, which would mean no.

    • @j.lietka9406
      @j.lietka9406 Год назад

      @@MiddleofKnowhere well with proper equipment, yes, but knowing which chip(s) and either reprogramming them, or soldering new ones in their place is a different story!

    • @MiddleofKnowhere
      @MiddleofKnowhere  Год назад +1

      True. Also, I don’t know what blr stands for.

    • @j.lietka9406
      @j.lietka9406 Год назад +1

      @@MiddleofKnowhere all right! BLR stands for Board Level Repair. Alex from Northridge, Louis from Rossmann group, Phil from theCod3r, and several others do BLR. Removing and replacing defective electronic components - capacitors, resistors, potentiometers, etc on a circuit board, like from a laptop, game console, tablet, and on, to fix them!

  • @JayzBeerz
    @JayzBeerz 3 года назад +1

    Most CPU's have TPM built in no need for this module.

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      Correction, most CPUs within the last couple of generations (for AMD) have a firmware based TPM (fTPM). Zen does not, Zen+ I think does, Zen 2 and 3 do. Intel calls their's something different but they've had firmware based TPM since at least the 9k series if not 7k.

  • @robertheinrich2994
    @robertheinrich2994 Год назад

    but is the question if you need it or not quite moot at this point?
    you want windows 11? you need it.
    you have a tpm 2.0 but a gen 7 CPU? you still don't get win 11. because reasons.
    just saying...

    • @MiddleofKnowhere
      @MiddleofKnowhere  Год назад

      Most CPUs have an fTPM so you don’t really need the physical module, especially to get win 11. It’s good to have if you want to secure your drives though as you can yank the module, put it in a safe deposit box, and effectively brick any data while you’re away.

    • @robertheinrich2994
      @robertheinrich2994 Год назад

      @@MiddleofKnowhere here is my problem. I have a laptop with a gen 7 CPU. more precisely a i7 7700HQ. not windows 11 compatible. the i7820HQ is windows 11 capable. solid explanation on the difference? none... the 7820 is 100MHz faster, that's it.
      oh, and it was used in a surface laptop.
      so my move is now to move away from windows because if they don't want me to use win 11, then there are other option.

  • @kascimo
    @kascimo 3 года назад

    can you install tpm 2.0 on any tpm connector even if it is old?

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      I believe so yes. As long as you have the connector, you can get the appropriate module. Definitely consult your mobo's manufacturer site.

  • @zack4382
    @zack4382 3 года назад

    How to know where to connect it and which one is it

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад +1

      Consult your manual. It will help you know if you have one, where it is, and which TPM you need to buy if you need to get a physical module.

  • @joejones6968
    @joejones6968 3 года назад

    Know what sux about this?
    These tiny little gizmos used to be only $6.00 on Newegg,
    Now they are $80 to $120. Depending on your particular build.
    So who's scalping who?

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      That is definitely crap. I made this video about a month prior to the Win 11 announcement. Mine cost 12 bucks for the TUF and 17 for the Dark Hero after the announcement 60 and up like you're saying. Terrible. And who knows how many incorrect modules people are buying since it's not the easiest to research.

  • @nikoladimitrov6231
    @nikoladimitrov6231 3 года назад

    im have tpms1 18 pin i can install this chip or cant you TMP 14 pin

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      You can’t install a 14-pin on an 18-pin connector. You’ll need to find the right tpm for your mobo.

    • @nikoladimitrov6231
      @nikoladimitrov6231 3 года назад +1

      @@MiddleofKnowhere oh im see now Asrtock model same 18 pin thx :))

  • @aungaster1945
    @aungaster1945 Год назад

    my first ones had it. I thought useless things and pulled out from board along with front speaker because beeping thingee. 😂
    I got scared and removed everythings from board. threw away included cables and monitor, like scene from offices( i think)

  • @ThatOneDudeWhoPostsStuff
    @ThatOneDudeWhoPostsStuff 3 года назад

    You now need one if you want to upgrade to Windows 11 for free.
    EDIT: Do you need a TPM if you have an fTPM supported CPU?

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад +1

      ftpm is firmware based tpm integrated into AMD cpus. It's very different can than a separate TPM module. You can still set up bitlocker it seems (I didn't fully complete the set up) without the TPM module installed.

    • @dalriada842
      @dalriada842 3 года назад

      I enabled all the fTPM and Secure Boot settings in the UEFI(BIOS). It's detected fine by Windows 10, but the PC Health Check says it is not compatible with Windows 11. It's a fairly recent system, and well above minimum specs. I've pre-ordered a hardware TPM module before the scalpers buy up all available supplies! I can see Microsoft rolling back on this requirement if most of the users can't upgrade. They seem to be trying to force new hardware sales, with their associated OEM licensing of Windows. Not a good strategy when the supply chains are still shaky.

  • @vBDKv
    @vBDKv 2 года назад +1

    AMD has finally fixed their fTPM stuttering issue, so no need to buy one of these. It's built into the CPU already.

  • @bobafett8732
    @bobafett8732 3 года назад +1

    Tpm is kinda useless for most people since they get software attacks which is why I don't ubderstand why windows forces this upon people

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      That’s interesting what do you mean by software vs hardware attacks? Wouldn’t a tpm help against software related viruses too? The research I did made it sound that way.

  • @robbie84
    @robbie84 3 года назад

    looks like you need that for windows 11

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад +1

      Not necessarily. Most modern CPUs do it at a Firmware level. Intel calls it PTT and AMD calls it fTPM. Just check your CPU in the BIO for those settings and if you see them you're good, otherwise, yeah you'll need a module provided your motherboard has the connector.

  • @azmawee
    @azmawee 3 года назад +2

    very missleading video, how on earth tpm can protect you from ransomware?

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      Here let me google that for you: www.cybersecurity-insiders.com/now-we-have-hardware-to-protect-against-ransomware/

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      and if you watch the video, this came out a month prior to the Win11 announcement and I explicitly state that it's a basics video and I provide a whack-ton of links in the description for further research.

    • @azmawee
      @azmawee 3 года назад

      @@MiddleofKnowhere do you ever understand the article?

    • @MiddleofKnowhere
      @MiddleofKnowhere  3 года назад

      If the point of ransomware is to highjack your files via malware and then make you pay to get them back to you and the point of a tpm is to prouve an added layer of security your files through encryption then what do you think?
      If files are secured behind an extra wall separated from the rest, ie a physical module, then yes a tpm can protect against ransomware. However, since you’re the one complaining why don’t you provide an answer?

    • @azmawee
      @azmawee 3 года назад

      @@MiddleofKnowhere TPM only store encryption keys of SED's, where that drive/partition (SED) separated via encryptions, which can also be done without TPM. Doing SED might impact performance but if it just a part to store sensitive data then it should be ok, and again it can be done without TPM. Relying only on TPM it self for me is not good enough as it create a single point of failure. What happen when TPM have vulnerability that leaks out their stored encryption keys? (this is a facts and happen before), any malware or cyber attack can take advantage and open up any encrypted drive/partition with ease. From what I can see, TPM are just to make things easier loke seamless decryptions (or encryptions), user won't have to interact by giving the keys or password to read/open (decrypt) the encrypted drive/partition/data, and that can also be done without TPM. Ransomware or not, when the access to write the data were open, it can still hits. Worst scenario like the one that attacks through vulnerability (zero-day, unpatched, etc etc) without any user interaction (like Wannacry). In the site you referring, TPM doesn't add that security layer, but by using anther security program that used TPM to store its keys and have automated verification when doing disk writing, that somehow will stop the ransomware from eating the files, and again, this can also be done without TPM. So no, windows 11 or average consumer don't need TPM, also, TPM is not a hardware encryption tools/acceleration or whatever, it just a module that store very sensitive data on hardware level (that why modern processor/motherboard can emulate this feature inside their firmware). The encryption/re-encryption acceleration hardware are way more expensive than TPM.

  • @MyIronman8
    @MyIronman8 3 года назад +2

    Windows 11 lol