TechLobstersabout 7 hours ago
TPM on Linux for disk encryption
1 min read
A TPM 2.0 is a dedicated security chip on the mainboard, a hard requirement for Windows 11. The chip holds PCRs that store sha256 hash values during boot. On Linux, the tpm2-tools package and systemd-cryptenroll allow binding disk encryption keys to specific PCRs, so the key unseals only when the system has not been modified.
Level
Hype check
Tap to vote and see what everyone thinks.
