Questions tagged [tpm]
A Trusted Platform Module (TPM) is a secure co-processor that provides cryptographic operations and stores system integrity measurements.
43
questions
0
votes
1
answer
247
views
enable BitLocker full disk encryption WITHOUT storing keys in the TPM windows 11
I am on Windows 11 and want to encrypt my Drive, i have a modern laptop with a TPM which is really easy to sniff via the solder points on the motherboard,
I want a regular Password encryption required ...
- 15
1
vote
0
answers
91
views
GCP vTPM: DA lockout mode
After restarting the compute engine vm many times, I get this error:
"Failed to fetch and write OIDC token: failed to retrieve attestation service token: failed to attest: failed to quote: ...
0
votes
0
answers
106
views
Configuring Windows Workstations to use their TPM in Bit Locker for all drives?
I have a bunch of AD-integrated workstations that will need to use BitLocker. They all have TPM 2.0 installed, and my overall goal is to get BitLocker set up and using the TPM for both the OS drive ...
- 361
0
votes
1
answer
747
views
Encrypting root partition with LUKS2 and TPM
I aim to encrypt the root partition and protect the key with TPM. Eventually, I want to lock the encryption key to the state of the TPM registers.
I set up Fedora Workstation 38 - during the setup ...
- 101
0
votes
1
answer
547
views
Full disk encryption on CentOS 9 Stream with TPM2 decryption at boot time
I'm working on provisioning a server that requires full drive encryption and I want to automate the process of decrypting the drive at startup using the TPM2 module available on the motherboard, but I ...
0
votes
4
answers
4k
views
Virtual machine not meeting Windows 11 system requirements, even though it should
I am trying to create a Windows 11 virtual machine on Hyper-V. I downloaded a clean x64 ISO from Microsoft. Here is my attempt using Generation 2 as a commenter recommended:
Generation 2
Default ...
- 141
1
vote
0
answers
1k
views
Grub error with tpm module in Fedora
I have a problem booting my fedora 36 (in version 35 the same thing happens to me and I have tried to reinstall from 0 with the same result). When I boot the grub I get this error.
error ..... tpm.c:...
- 11
8
votes
2
answers
15k
views
Qemu cannot run Windows 11
When trying to execute the setup the setup stops after selecting the os type with the following result:
"this PC doesn't meet the minimum system requirements to install this version of windows. ...
- 373
0
votes
0
answers
723
views
Active Directory migrations and profile security translation (something's going wrong)
This is a general post not seeking a technical resolution to a precise problem. I just want to warn industry colleagues. My career focus has been on AD for 20 years. The precise niche I concentrate on ...
0
votes
1
answer
42
views
On Windows how to restrict access to a Self-Encrypting-Disk partitiion to a specific service
I am setting up a server in an industrial environment that will have a service that injects security assets into a PCB. I want the server to store these assets on a self encrypting disk where one ...
- 31
0
votes
1
answer
265
views
Bitlocker Auto-Unlock C drive with TPM
I wanted to enable auto-unlock on C drive with TPM. When I click on enable bitlocker on C Drive, it shows me only 2 options
Insert a USB drive
Enter a password
I do not see any option which says
...
0
votes
2
answers
1k
views
Resetting the TPM module on my motherboard?
I've got a TPM set up on a motherboard, but the motherboard has now been swapped, and the HDD is still the same.
Would like to basically reset everything to factory defaults, but the HDD is encrypted ...
- 111
0
votes
1
answer
755
views
Initialize TPM virtual smart card in Google Cloud VM running Windows Server
After setting up a Windows Server with a vTPM (see https://cloud.google.com/blog/products/gcp/security-in-plaintext-use-shielded-vms-to-harden-your-gcp-workloads) in Google Cloud VM and accesing to it ...
google-compute-engine
5
votes
1
answer
1k
views
BitLocker on Hyper-V Server 2019 - Failed - The system cannot find the file specified
To start with, I want to be clear that this is on "Hyper-V Server 2019" (free headless hypervisor) and not "Windows Server 2019" with the Hyper-V role installed.
I've been banging ...
- 353
0
votes
2
answers
77
views
Bitlocker my LAN
I have a Windows Server 2012 R2 LAN that is working great. I recently have been given the task to encrypt the data at rest. I would like to use bitlocker, but all the documentation is for ...
- 117
4
votes
0
answers
134
views
Bitlocker - mainboard exchange won't require recovery password - why?
A mainboard died. It was exchanged for the same board type (same bios and config, as well, also a new CPU but of the same type).
The hard drive is encrypted with bitlocker (on Win10 Pro v1903) and I ...
- 61
1
vote
0
answers
1k
views
Optional TPM Key Attestation in AD Certificate Services
We have a range of Windows 10 computers in our estate - some with no TPM chip, some with TPM 1.2, and some with TPM 2.0.
I want to configure a certificate template to optionally perform TPM Key ...
- 11
1
vote
0
answers
199
views
making use of self encrypting SSD
Is something special needed?
It is in a supermicro server having a AOM-TPM-9670V-S TPM 2.0 and a Broadcom/Avago MegaRAID 9361-24i card.
Trying to use some Seagate Nytro SAS self encrypting SSD's; ...
- 865
11
votes
2
answers
14k
views
Trusted Platform Module (TPM) versions 1.2 vs 2.0 and header number of pins
I am trying to understand the TPM header on a motherboard I have, which is an Asrock "H170m Pro4" It has a TPMS1 header on the motherboard, and it has 9x2 pins with 1 missing.
In searching the web,...
- 865
2
votes
0
answers
151
views
How can I see if Windows is refusing to trust a TPM?
I've been fighting with my motherboard's manufacturer to get a TPM I bought from them to work. In UEFI/BIOS I can see the TPM and set its state to enabled, but in tpm.msc it just reads that no ...
- 234
1
vote
1
answer
881
views
Bitlocker not auto-unlocking C: drive on server 2008 R2
Here's the scenario. We'got a Dell PE T110 (I know, I know), that we've enabled Bitlocker via TPM. On reboots, it asks to re-enter the bitlocker key, and we have no idea why it's not auto-unlocking. ...
- 21
1
vote
0
answers
410
views
Bitlocker on Hyper-V server
I have installed Hyper-V server on my new machine and then I added the Bitlocker function and initialized TPM. Now, I am trying to enable Bitlocker on the HDD.
I need:
encryption key saved on TPM
...
- 129
4
votes
1
answer
1k
views
Encrypt disks using SED and store keys in TPM?
I'm buying servers lately and all of them have disks that support TCG Opal full-disk encryption (aka SED). What I'd like to do is:
Store data encrypted-at-rest on the disks (NVMe & SAS).
Not be ...
- 497
0
votes
1
answer
668
views
Accidentally cleared TPM on BitLocked computer
One of my technicians was supposed to image a computer that has BitLocker enabled. He didn't know the access pin and instead inserted a Dell boot disk to do a soft-restore (keeping all of the clients ...
3
votes
1
answer
17k
views
How do I identify which bitlocker protector is active?
BitLockerVolume -MountPoint C).KeyProtector I see multiple RecoveryPassword key protectors, how do I know which one is active?
If I pull the HDD and plug it into another machine its going to ask me ...
- 4,291
3
votes
2
answers
7k
views
Reason for TPM lockout
We have several Surface Pro 3 devices deployed with BitLocker enabled in TPM + PIN mode. The devices have a TPM 2.0 chip and are running Windows 8.1 Pro.
We have an issue where users are occasionally ...
- 1,872
2
votes
1
answer
1k
views
how do I view current tpm owner in windows?
How do I see if a TPM owner has already been set? All see are examples of how to clear the TPM, reset owner password, change owner. I just want to see if the owner is set and possibly who it is set to....
- 4,291
0
votes
1
answer
2k
views
Do any hypervisors support vTPM?
I am trying to use vtpm to provide remote attestation for VMs, but I do not know what hypervisors support vtpm. Does anyone know?
jlxcsy
1
vote
1
answer
985
views
Can't Enable Bitlocker
Why not?!
How can I find out why not?
I recently enabled Bitlocker without TPM in our domain controller:
Update
Thanks to Greg's 2nd comment I've discovered that I need a basic disk:
C:\Windows\...
- 681
0
votes
1
answer
883
views
McAfee Drive Encryption issues with HP Elitebook 755 G2
Hi all (Sorry if this isn't the right forum to post on),
I have a slightly frustrating issue involving a small collection of HP laptops and McAfee Encryption. We can encrypt the laptops absolutely ...
1
vote
1
answer
2k
views
Bitlocker without TPM on Hyper-V 2012 r2 from the command line?
I know that Bitlocker can be used from a Hyper-V Server 2012 r2 install. And I know that it can be done on a machine that lacks a TPM chip. The problem is that all of the examples I've found depend on ...
- 1,160
5
votes
1
answer
5k
views
How can I encrypt my SSD but still boot unattended (linux)? [closed]
I have a system that displays video from a camera feed with an overlay, and it must boot without any user intervention (the quicker the better). However, these systems will be in the hands of ...
- 151
1
vote
1
answer
13k
views
Can't store TPM information in AD
I am attempting to use GP to store TPM information in AD. I have verified that the schema contains the proper object property, and verified that the property and the ACE is present on the given ...
- 1,850
2
votes
2
answers
2k
views
BitLocker - No TPM & No Flash Drive
I have done some research on using BitLocker in an environment where the machines do not have a TPM and it appears you will need to utilize a Flash Drive for it to work properly. This seems to be the ...
- 145
10
votes
2
answers
20k
views
How to enable BitLocker with no prompts to the end user
I have configured BitLocker and TPM settings in Group Policy such that all the options are set and the recovery keys stored in Active Directory. All our machines are running Windows 7 with a standard ...
- 1,922
2
votes
2
answers
2k
views
Windows 8.1 TPM ownership on Server 2008 R2 schema - not to spec?
My organization is running AD DS on Server 2008 R2 schema. Already a bad start, I know, but let's pretend that's impossible to change. In our default domain policy, we have the following setting ...
- 203
2
votes
1
answer
516
views
Using virtual smart card for server-side keys?
Does anybody know if it's possible to store private keys, belonging to service account or computer account, on Windows 8 VSC (virtual smart card)?
As far as I understand, requirement for 8-symbols (...
- 323
0
votes
1
answer
57
views
How to setup a platform with TPM? [closed]
I am trying to learn about TPMs. I would like a machine with a TPM. I understand that this is a chip on the motherboard? Is a TPM something that you can install or is it something that comes soldered ...
- 103
9
votes
2
answers
21k
views
TPM had to be reintialized: Does a new recovery password have to be uploaded to AD?
Some way some how, a user's machine couldn't get read the bitlocker password off of the TPM chip, and I had to enter the recovery key (stored in AD) to get in. No big deal, but once in the machine, I ...
- 5,601
1
vote
1
answer
322
views
Upgrade Trusted Platform Module (TPM)?
I have some systems that I am unable to enable Bitlocker on. The TPM wizard reports that the version of the TPM is inadequate to function with bitlocker.
Is it possible to upgrade a TPM to 1.2?
- 937
7
votes
2
answers
8k
views
How to detect Dell TPM from inside Windows?
I need to know whether my server has TPM installed. It is located 10000 miles away from me so going there to look at the BIOS is not an option. It is also not anyhow described on the Dell website nor ...
- 772
7
votes
2
answers
5k
views
Approaches for Linux server disk encryption
What are the approaches available for fully encrypting a disk on a remote server (say, colocated in a datacenter)? On Windows, we can just turn on Bitlocker with a TPM. Then the server can reboot, and ...
- 1,739
2
votes
1
answer
395
views
Trusted Platform Module and authenticating a PC to a remote server
Can TPM be used to authenticate the computer to a remote server? Is there any recommended reading material for that topic? How can I use TPM to protect my application from being cloned to another PC?
- 299