Questions tagged [tpm]

A Trusted Platform Module (TPM) is a secure co-processor that provides cryptographic operations and stores system integrity measurements.

Filter by
Sorted by
Tagged with
0
votes
0answers
84 views

TPM1.2, CentOS7 and LUKS - Decrypting `root` at Boot Without Passphrase

I want to configure a CentOS 7 system to automatically decrypt a LUKS encrypted root partition at boot, without prompting for a passphrase. This server is equipped with a TPM 1.2 chip, which I can ...
0
votes
0answers
14 views

Intel Servers that Meet Fips 140-2

There are lots of hardware requirements for FIPS 140-2 servers some include: 1) Must be able to detect they were opened 2) Can not stick a camera in them. 3) Maximum vent hole size. I'm not asking ...
0
votes
0answers
12 views

Windows 10: Identifying the PCR Banks Supported by TPM2 Chip

I'm trying to pull information on the PCR banks (SHA1/SHA256) supported by a Windows 10 host having a TPM2 chip via CLI. Is there a built-in command or scriptlet to get this information? I have tried ...
0
votes
2answers
50 views

Resetting the TPM module on my motherboard?

I've got a TPM set up on a motherboard, but the motherboard has now been swapped, and the HDD is still the same. Would like to basically reset everything to factory defaults, but the HDD is encrypted ...
0
votes
0answers
15 views

Use TPM Endorsement Key to unlock certificates, deployment pagkages, etc? (Win10 deployments)

I've got a few scenarios, but let's take the simplest: I'd like to be able to send a server certificate and key to a distant box; I'd like to have the ability to decrypt the container and therefore ...
0
votes
1answer
134 views

Initialize TPM virtual smart card in Google Cloud VM running Windows Server

After setting up a Windows Server with a vTPM (see https://cloud.google.com/blog/products/gcp/security-in-plaintext-use-shielded-vms-to-harden-your-gcp-workloads) in Google Cloud VM and accesing to it ...
4
votes
1answer
333 views

BitLocker on Hyper-V Server 2019 - Failed - The system cannot find the file specified

To start with, I want to be clear that this is on "Hyper-V Server 2019" (free headless hypervisor) and not "Windows Server 2019" with the Hyper-V role installed. I've been banging ...
0
votes
2answers
61 views

Bitlocker my LAN

I have a Windows Server 2012 R2 LAN that is working great. I recently have been given the task to encrypt the data at rest. I would like to use bitlocker, but all the documentation is for ...
4
votes
0answers
106 views

Bitlocker - mainboard exchange won't require recovery password - why?

A mainboard died. It was exchanged for the same board type (same bios and config, as well, also a new CPU but of the same type). The hard drive is encrypted with bitlocker (on Win10 Pro v1903) and I ...
1
vote
0answers
535 views

Optional TPM Key Attestation in AD Certificate Services

We have a range of Windows 10 computers in our estate - some with no TPM chip, some with TPM 1.2, and some with TPM 2.0. I want to configure a certificate template to optionally perform TPM Key ...
1
vote
0answers
36 views

making use of self encrypting SSD

Is something special needed? It is in a supermicro server having a AOM-TPM-9670V-S TPM 2.0 and a Broadcom/Avago MegaRAID 9361-24i card. Trying to use some Seagate Nytro SAS self encrypting SSD's; ...
4
votes
1answer
2k views

Trusted Platform Module (TPM) versions 1.2 vs 2.0 and header number of pins

I am trying to understand the TPM header on a motherboard I have, which is an Asrock "H170m Pro4" It has a TPMS1 header on the motherboard, and it has 9x2 pins with 1 missing. In searching the web,...
2
votes
0answers
79 views

How can I see if Windows is refusing to trust a TPM?

I've been fighting with my motherboard's manufacturer to get a TPM I bought from them to work. In UEFI/BIOS I can see the TPM and set its state to enabled, but in tpm.msc it just reads that no ...
1
vote
1answer
647 views

Bitlocker not auto-unlocking C: drive on server 2008 R2

Here's the scenario. We'got a Dell PE T110 (I know, I know), that we've enabled Bitlocker via TPM. On reboots, it asks to re-enter the bitlocker key, and we have no idea why it's not auto-unlocking. ...
1
vote
0answers
367 views

Bitlocker on Hyper-V server

I have installed Hyper-V server on my new machine and then I added the Bitlocker function and initialized TPM. Now, I am trying to enable Bitlocker on the HDD. I need: encryption key saved on TPM ...
3
votes
0answers
589 views

Encrypt disks using SED and store keys in TPM?

I'm buying servers lately and all of them have disks that support TCG Opal full-disk encryption (aka SED). What I'd like to do is: Store data encrypted-at-rest on the disks (NVMe & SAS). Not be ...
0
votes
1answer
493 views

Accidentally cleared TPM on BitLocked computer

One of my technicians was supposed to image a computer that has BitLocker enabled. He didn't know the access pin and instead inserted a Dell boot disk to do a soft-restore (keeping all of the clients ...
3
votes
1answer
11k views

How do I identify which bitlocker protector is active?

BitLockerVolume -MountPoint C).KeyProtector I see multiple RecoveryPassword key protectors, how do I know which one is active? If I pull the HDD and plug it into another machine its going to ask me ...
3
votes
2answers
5k views

Reason for TPM lockout

We have several Surface Pro 3 devices deployed with BitLocker enabled in TPM + PIN mode. The devices have a TPM 2.0 chip and are running Windows 8.1 Pro. We have an issue where users are occasionally ...
2
votes
1answer
645 views

how do I view current tpm owner in windows?

How do I see if a TPM owner has already been set? All see are examples of how to clear the TPM, reset owner password, change owner. I just want to see if the owner is set and possibly who it is set to....
0
votes
1answer
2k views

Do any hypervisors support vTPM?

I am trying to use vtpm to provide remote attestation for VMs, but I do not know what hypervisors support vtpm. Does anyone know?
1
vote
1answer
820 views

Can't Enable Bitlocker

Why not?! How can I find out why not? I recently enabled Bitlocker without TPM in our domain controller: Update Thanks to Greg's 2nd comment I've discovered that I need a basic disk: C:\Windows\...
0
votes
1answer
644 views

McAfee Drive Encryption issues with HP Elitebook 755 G2

Hi all (Sorry if this isn't the right forum to post on), I have a slightly frustrating issue involving a small collection of HP laptops and McAfee Encryption. We can encrypt the laptops absolutely ...
1
vote
1answer
2k views

Bitlocker without TPM on Hyper-V 2012 r2 from the command line?

I know that Bitlocker can be used from a Hyper-V Server 2012 r2 install. And I know that it can be done on a machine that lacks a TPM chip. The problem is that all of the examples I've found depend on ...
5
votes
1answer
4k views

How can I encrypt my SSD but still boot unattended (linux)? [closed]

I have a system that displays video from a camera feed with an overlay, and it must boot without any user intervention (the quicker the better). However, these systems will be in the hands of ...
1
vote
1answer
12k views

Can't store TPM information in AD

I am attempting to use GP to store TPM information in AD. I have verified that the schema contains the proper object property, and verified that the property and the ACE is present on the given ...
2
votes
2answers
2k views

BitLocker - No TPM & No Flash Drive

I have done some research on using BitLocker in an environment where the machines do not have a TPM and it appears you will need to utilize a Flash Drive for it to work properly. This seems to be the ...
10
votes
2answers
18k views

How to enable BitLocker with no prompts to the end user

I have configured BitLocker and TPM settings in Group Policy such that all the options are set and the recovery keys stored in Active Directory. All our machines are running Windows 7 with a standard ...
2
votes
2answers
2k views

Windows 8.1 TPM ownership on Server 2008 R2 schema - not to spec?

My organization is running AD DS on Server 2008 R2 schema. Already a bad start, I know, but let's pretend that's impossible to change. In our default domain policy, we have the following setting ...
2
votes
1answer
473 views

Using virtual smart card for server-side keys?

Does anybody know if it's possible to store private keys, belonging to service account or computer account, on Windows 8 VSC (virtual smart card)? As far as I understand, requirement for 8-symbols (...
0
votes
1answer
51 views

How to setup a platform with TPM? [closed]

I am trying to learn about TPMs. I would like a machine with a TPM. I understand that this is a chip on the motherboard? Is a TPM something that you can install or is it something that comes soldered ...
9
votes
2answers
20k views

TPM had to be reintialized: Does a new recovery password have to be uploaded to AD?

Some way some how, a user's machine couldn't get read the bitlocker password off of the TPM chip, and I had to enter the recovery key (stored in AD) to get in. No big deal, but once in the machine, I ...
1
vote
1answer
309 views

Upgrade Trusted Platform Module (TPM)?

I have some systems that I am unable to enable Bitlocker on. The TPM wizard reports that the version of the TPM is inadequate to function with bitlocker. Is it possible to upgrade a TPM to 1.2?
7
votes
2answers
7k views

How to detect Dell TPM from inside Windows?

I need to know whether my server has TPM installed. It is located 10000 miles away from me so going there to look at the BIOS is not an option. It is also not anyhow described on the Dell website nor ...
7
votes
2answers
3k views

Approaches for Linux server disk encryption

What are the approaches available for fully encrypting a disk on a remote server (say, colocated in a datacenter)? On Windows, we can just turn on Bitlocker with a TPM. Then the server can reboot, and ...
2
votes
1answer
185 views

Trusted Platform Module and authenticating a PC to a remote server

Can TPM be used to authenticate the computer to a remote server? Is there any recommended reading material for that topic? How can I use TPM to protect my application from being cloned to another PC?