topic Re: firmware TPM in Mobile and Desktop Processors

firmware TPM

Slisansn — Wed, 06 Oct 2021 16:16:10 GMT

Hi! Currently I have on my desktop PC an i5-6500 CPU. I guess there should be firmware TPM available in CPU which could be activated in BIOS. The mainboard has TPM 1.2 which is activated and there is FDE with Bitlocker. The question is which TPM is better to use to achieve higher level of security - discrete or firmware TPM located in CPU? If I activate firmware TPM should I decript disk first and disable discrete TPM? Or just delete bde protectors and then add new protector with CPU firmware tpm?

Re: firmware TPM

n_scott_pearson — Thu, 07 Oct 2021 01:21:03 GMT

AFAIK, PTT can only be used in systems that are NOT outfitted with a hardware TPM. If your system has a hardware TPM, the BIOS is not going to support PTT.

Sorry,

...S

Re: firmware TPM

Slisansn — Thu, 07 Oct 2021 03:47:48 GMT

Thanks. Anyway I managed to update discrete TPM to version 2.0 with the help of HP TPM Configuration Utility version. The only issue was that ssd had to be decrypted first and after update encrypted again, but that was fast. And installer did not allow to do the upgrade with SGX turned on in BIOS, so had to disable it to make it happen.