tpm regarding windows 11 question

[tonimark]

so since some people and especially gamers will upgrade to windows 11 there is a huge question regarding TPMs and yes i read the reason microsoft WANTS TPM is for hardware level protection from malware attacks , hackers etc. the main question is that do we need to have TPM and i mean a specific unit to run windows 11 similar to an tpm encrypted hard drive? or we can move our drive freely without needing encryption from stored tpm modules? i am planning to use the onboard ftpm of my CPU for upgrade and the 2nd though that even if i bought a plug-in chip for motherboard it may not be compatible with the next one(after upgrading) which may requid a professional mover .last in the worse case scenario if a tpm chip is broken , or the cpu (which have the ftpm) is broken or the motherboard with built in tpm is broken and the encryptions keys are lost we may have permanent data loss from windows 11 installation

[r.linder]

Firmware-based TPM is usually available, at least for AMD Ryzen. It's called fTPM in BIOS.

[Illusion of Progress]

I think OP is asking if there's a risk of data loss from the key being lost (such as when updating BIOS). While TPM is required to install Windows 11, I don't think that will be the case unless you encrypt the drive. You get a warning when activating fTPM (at least I do) that you can lose access to data if the key is lost, which may make some people wonder if enabling it will lead to that being the case globally. But I think it only applies if encrypting things with it. Unknown whether Windows 11 will do this in some capacity (I'm guessing no though) but since Windows is requiring it, some may think it will. I think it will be more for advanced secirty requiring account stuff (Microsoft account, Windows password or password-less access locks and features, etc.).

[iceman1980]

TPMs are not the security holygrail Microsoft thinks they are, they can be exploited to completely make malware disappear from OS view level.

It will help with driver signing, boot kits , and cryptographic key storage. Its just a "fear mongers selling point".

Check out the usenix.org article about "Cloaking malware with the Trusted platform module"

[tonimark]

Początkowo opublikowane przez Product ∏:

TPMs are not the security holygrail Microsoft thinks they are, they can be exploited to completely make malware disappear from OS view level.

It will help with driver signing, boot kits , and cryptographic key storage. Its just a "fear mongers selling point".

Check out the usenix.org article about "Cloaking malware with the Trusted platform module"

i agree
but what i am asking is that will windows 11 break if i erase the tpm chip?

[iceman1980]

Początkowo opublikowane przez tonimark:

Początkowo opublikowane przez Product ∏:

TPMs are not the security holygrail Microsoft thinks they are, they can be exploited to completely make malware disappear from OS view level.

It will help with driver signing, boot kits , and cryptographic key storage. Its just a "fear mongers selling point".

Check out the usenix.org article about "Cloaking malware with the Trusted platform module"

i agree
but what i am asking is that will windows 11 break if i erase the tpm chip?

No unless you are using it for encryption. I use TPM for biometric keys which are tied to Bitlocker So clearing it would be a very bad idea for me. The TPM may also deal with the authentication of Windows through the boot disk as well but if its not using it for key storage clearing the tpm should have no effect.

If you reinstall windows it will probably generate new keypairs, and store them.

[tonimark]

Początkowo opublikowane przez Product ∏:

Początkowo opublikowane przez tonimark:

i agree
but what i am asking is that will windows 11 break if i erase the tpm chip?

No unless you are using it for encryption. I use TPM for biometric keys which are tied to Bitlocker So clearing it would be a very bad idea for me. The TPM may also deal with the authentication of Windows through the boot disk as well but if its not using it for key storage clearing the tpm should have no effect.

If you reinstall windows it will probably generate new keypairs, and store them.

i don't use tpm for encryption of anything i just have it because microsoft wants it so