Can You Explain What TPM And Secure Boot Are?
TPM and Secure Boot Explained Trusted Platform Module (TPM) The Trusted Platform Module is a dedicated microchip on your PC-s motherboard that provides hardware-based security functions. It generates, stores, and manages cryptographic keys in an isolated environment, ensuring sensitive data remains protected even if the operating system is compromised. Stores a unique storage root key whose private portion never leaves the TPM Creates and encrypts (-wraps-) keys so they can only be decrypted by that specific TPM Seals keys or data to particular hardware or firmware states, unsealing only when conditions match Exists as a physical chip, a soldered module, or firmware-based TPM (fTPM on AMD, PTT on Intel) Secure Boot Secure Boot is a UEFI firmware feature that ensures only software signed by trusted authorities can load during the boot process. By verifying digital signatures against a built-in database of approved keys, it stops malware (like rootkits) and unauthorized OS loaders from running before Windows starts. Executes in UEFI before any bootloader or OS code Checks each firmware, driver, and bootloader signature against firmware-stored key databases Rejects unsigned or tampered components, preventing low-level attacks Requires UEFI firmware with Secure Boot enabled and properly managed key configuration Would you like step-by-step guidance on checking your TPM status, enabling fTPM/PTT in BIOS, or turning on Secure Boot to meet Windows 11 requirements-