What is a Trusted Platform Module (TPM)? Protecting your PC and data through hardware encryption
Vložit
- čas přidán 28. 06. 2024
- Motherboards are full of features, and one such feature I didn't know anything about, but kept coming across each time I did an overview video was the Trusted Platform Module or TPM header. As such, I've done some research, bought one, and even tinkered around with it to discover what the TPM is and what it can do.
𝐁𝐮𝐲 𝐚 𝐓𝐏𝐌 𝐌𝐨𝐝𝐮𝐥𝐞
► amzn.to/3vqwAhQ
► TPM compatible with the TUF Gaming B550-Plus - amzn.to/3dWvKDj
► TPM compatible with the Crosshair VIII Dark Hero - amzn.to/3tUI7o5
𝐇𝐞𝐥𝐩𝐟𝐮𝐥 𝐚𝐫𝐭𝐢𝐜𝐥𝐞𝐬
► www.laptopmag.com/articles/tp...
► bit.ly/3aM4g1c
► bit.ly/3tWHKdz
► bit.ly/2QEuvzM
► bit.ly/3vqvpiq
► bit.ly/3sROQ1D
► 5 ways to relock an encrypted hard drive without rebooting - bit.ly/2RjSQLC
► Tutorial on how to add “Lock Drive” to contextual menu - bit.ly/33NTbsA
𝐂𝐨𝐧𝐧𝐞𝐜𝐭 𝐰𝐢𝐭𝐡 𝐦𝐞
Twitter: / middleoknowhere
Facebook: / middleoknowhere
Instagram: / middleoknowhere
𝐒𝐮𝐛𝐬𝐜𝐫𝐢𝐛𝐞
/ middleofknowhere
𝐓𝐢𝐦𝐞𝐬𝐭𝐚𝐦𝐩𝐬
00:00 - Opening
00:33 - Introduction
01:18 - What is a TPM, and what does it do?
02:22 - Do you need a TPM?
03:24 - How do you know which TPM to get and where can you buy one?
03:57 - How do you install the TPM and how do you use it?
04:45 - Change of plans . . .
08:16 - You installed the TPM onto your motherboard. Now what?
09:09 - Opening tpm.msc and activating Windows Bitlocker
14:08 - Conclusion and Closing
𝐄𝐪𝐮𝐢𝐩𝐦𝐞𝐧𝐭 𝐈 𝐮𝐬𝐞
Camera and Lenses
► Sony Alpha A6400 w/16-50mm Lens - amzn.to/3cTstB9
► Sony E 35mm f/1.8 OSS Lens - amzn.to/37iJK5s
► Sigma 16mm f/1.4 - amzn.to/3bUKlP2
𝐀𝐮𝐝𝐢𝐨
► Deity V.Lav Lavalier Lapel Microphone - bit.ly/39QcHaH
► Deity V-Mic D3 Pro Shotgun Microphone - amzn.to/3sCf1KW
𝐋𝐢𝐠𝐡𝐭𝐢𝐧𝐠
► LimoStudio, Soft Lighting Umbrella Kit - amzn.to/2M9QM5V
► Aputure MC - amzn.to/35VuzzK
𝐎𝐭𝐡𝐞𝐫 𝐞𝐪𝐮𝐢𝐩𝐦𝐞𝐧𝐭
► Manfrotto MVK502055XPRO3 tripod with 502 Series Head - amzn.to/2UxmmMq
► Sony RMTDSLR2 Wireless Remote - amzn.to/2YnV7VJ
► Neewer NP-FW50 Camera Battery Charger Set - amzn.to/2XTXf8N
𝐂𝐫𝐞𝐝𝐢𝐭𝐬
Intro and Outro music used with permission from www.storyblocks.com
Additional Music
► Music by KaizanBlu
► Track Name: Stay (ft. Queanna)
► CZcams: / kaizanblu
► Licence: creativecommons.org/licenses/...
End Card Icons
► By Side Project through www.iconfinder.com. Used with permission under CC by 3.0 (bit.ly/1E6HPMf).
Additional Icons
► By Nikita Golubev, Smashicons and Ultimate Arm from www.flaticon.com.
The video and description may contain affiliate links. If you click on a link and order something, I may receive a commission. Money earned helps to support my channel.
#Trusted Platform Module #TPM #Encryption - Věda a technologie
thank you for this knowledge, now half the world needs these modules.
Why can’t all CZcams videos be this short and sweet. Thanks, totally worked
Thank you!
Short and sweet? It’s nearly 16 mins long.
Exactly what I was looking for. Quick and easy explanation. Thanks!
This, this was super simple and well put, really like the video format, keep at it!
Thanks, will do!
I just built a system with the X570-pro, saw this TPM header and bought a module to fit it just to see what it does. After watching your very informative video, I understand what it is now (lol) and what to do with it. I shall explore it more. Thanks for the video!
Great video, just the meat and potatoes, no unneeded content.
Love your presentation. Came here from your video about the MSI B550M Pro. Subscribed!
Many thanks!
I first heard of the tpm mod from your vid on x570, glad to see this follow up - 🌻🦈
Thanks! Glad you watched it. Hope I was able to provide some information. It's an interesting thing, and I may dive more into it if I can get more information on functionalities beyond bitlocker.
Glad to see you diving into security and trust! This is really trending in the workplace in the last year to keep work computers secure and reducing the potential issues when recycling old computers/harddrives with work data on them.
Thanks! The tpm is def an interesting thing. It’s a pretty powerful thing in terms of protecting your data and not for not a lot of money! These maybe max out at 20 bucks if that.
Ben, this video is blowing up because of win 11! Love it!
An SSD encrypted with Bitlocker with TPM protection can be cracked relatively easily. So what's the point with this nonsense?
@@lenny108 Do you have a reference to point us to showing a bitlocker drive being cracked? My understanding is the only method of cracking would be brute force cryptography.
Outstanding presentation. Was looking "for add a TPM chip to a HPE H8-1380T CTO DESKTOP PC". Now I shall call HP for that specific information. Security is of essence now-a-days, especially for us Small Business Owners.
Thank you so much! Glad the video helped.
Gracias por la info y contar tu experiencia!!
hey man, im still learning but i think you can muck around with secure boot keys, i think this is where retail or oem version of windows determines how secure you can wrap the tpm but i could be wrong
Thank You Middle of Knowhere, got my tpm to work on win srv 19.
You presented really well , Thank you
Thank you very much. :)
Thanks . this video gonna viral soon. take love.
Yes! Very in inform n need to get one for my Asus mb
Newhail Lauched TPM2.0 Module TPM SPI 12Pin Module with infineon SLB 9670 for Gigabyte Motherboard,we tested,it is worked.
Thank you for the information, it helped a lot! Also nice t shirt! good to see a DC fan. Btw would you mind sharing your wallpaper? Thanks!
Thanks for the compliment. :) I love DC for sure. Been collecting on and off since 1989. My wife got me a slew of DC t-shirts for my birthday this year.
I believe this is the link I used for my wallpaper. I have a 1440p monitor so I wanted something larger than 1080p. You can also google, Superman Abstract Wallpaper to get it to show up in results. hdwallpaperim.com/abstract-superman-the-movie/
Thank you for this video. You will be sure to get a lot of new views now that windows required this.
I was lucky to fint and asus 20-1 pin for 1.68 buck 4 days ago. It now of the time of wring over 100 bucks on ebay!!
Got it today, and seems to be working !
Thank you! Wow only $1.68? That's a great price!I think mine cost 12 or 17 bucks when I bought it last month, but still way better than 100 that scalpers are selling for. Glad it works for you! TPM is definitely an interesting thing to tinker with.
thanks for the helpful video
Thank you Sir !
Great video! Windows 11 will require TPM 2.0 to be enabled. Thanks for your helpful links. : - )
You’re very welcome!
Note that 6th Gen and newer Intel has a firmware option, though they check for 8th or greater.
Very informative video. Only thing you didn't explain (or I missed it!) is why you didn't just enable and use the CPU firmware's TPM. That is, was there a specific reason you chose to install and use a plug-in TPM?
Hi and thanks for watching. Yep I chose the physical one because of my curiosity. I just wanted to know what went into the tpm header and what it could do. Then I decided to share what I found out through research and doing with you all. :) this video really just served as an outlet for that curiosity and what I learned hoping it would help or inform others. I never dreamed MS would end up making TPM a requirement for win 11 a month later resulting in the video blowing up.
@@MiddleofKnowhere Hello, first of all, the video was interesting and informative, but I was left wondering if, once the TPM module is installed, is it necessary to disable AMD ftpm? From already thank you very much, greetings.
Hi. I have a question regarding the TPM?
If my pc broke down and I want to get some files on the Hard-drive can I still access the files when I transfer to my other PC the Hard drive?
Nice video. Tnx
Thanks for doing this, I just bought the exact same module, as FW-TPM seemed like a recipe for data loss (data dies with CPU!). I have a question, if I upgrade my computer motherboard or CPU and want to use the same drive, can I move the physical TPM into the new machine and us the same drives?
Only if the motherboard has the same Tpm connection as far as I’m aware. Like an asus to asus board with the same 14-1 pin layout. I honestly would decrypt the drive then move everything then re-encrypt, but that’s me and I’m a total noob to this. Thank you for watching!
Hello, first of all, the video was interesting and informative, but I was left wondering if, once the TPM module is installed, is it necessary to disable AMD ftpm? From already thank you very much, greetings. 🙂
Thank you very much for the information. I had already done a Research myself, but it struck me how little information is actually available. My HP x360 laptop also has one built in and just like your experience, I've seen it come up a few times, but have no idea what it's for. And now on my Asus z170 Pro there is also a connector, but in both the manuals or their website I couldn't find anything useful at all. But I'm going to have a look at your links right away, hopefully I'll learn something from that. I do have one more question. How does it work if you have multiple systems with a rpm chip. Is this somewhat synchronized.
That's a great question. I think I understand it if you have let's say 3 systems with TPM enabled and they're on a network with 1 unified password type thing? Honestly, I've have no idea how that would work, lol. You're right when saying there is very little information, and definitely not enough on how to set things up and what all you can do when you have a TPM.
Thank you for watching!
@@MiddleofKnowhere youre welcome
You must have worked for Microsoft getting this before Win 11! Kidding, great vid and thanks
Lol! Thanks!!!
would be cool if you actually tried to test the security featueres. ie. take the hdd out and put it in another pc and see if the tpm did anything to secure the data on the drive or not.
Thanx for the video,
Maybe one day but not for now
for those just showing up, it is required to have a tpm for windows 11. good luck finding a 20 pin connector if you are one of the unlucky few such as I. with a motherboard pre 2016
I did not know the tpm was required for win 11. Was this just announced? Seems odd considering modern motherboards like the rog Strix b-550-f gaming, which is just did a deep dive vid on, doesn’t have a tpm header.
@@MiddleofKnowhere it’s on the Microsoft requirement page and they tell you if you are compatible via a pc health app. It’s there way trying to get people to buy new computers and shit. It’s also a pretty good reason to change the name since it requires different specs to run the os. I’m going to start a conspiracy theory that there aren’t very many tpm modules to buy Bc they don’t want you to buy them and upgrade. Anyway hope you get the chance to install one
Hey thank you for the information. This is def getting me very curious. I was able to install the one for my dark hero and activate it in the bios super easy. I just haven’t kept up on win 11 this week much. Been pretty sick and then today in ESO midyear mayhem started, so I’ve been pvp’ing like crazy today after work.
I read an article too about trying to get tpm 2.0 vs 1.2. I assume 2.0 is more secure. Hope people can get the modules and those with laptops have them integrated.
@@Foxinuhhbox tpm 1.2 is the base minimum, but reading the requirements at a glance it says 2.0 is required, but look around while your there you will find it.
Do u think tpm will prevent IT scanners from getting info of my bank account in a remote session?
Can i install any tpm module if i have a tpm header in my motherboard???
I have a msi b45 motherboard and i need yo install a asus tpm 2.0 module.. your answer will help a lot
If you have an MSI b450 motherboard you'll need to look it up on the MSI site and find the correct TPM to use in it. Don't use the ASUS one. You need to match the TPMs as far as I'm aware.
Over the last week, I have seen TPM's prices go from $9.99 to over $250
That is insane
A tpm chip ships from china at about $0.1 - $10
I was able to install Windows 11 by just enabling the AMD fTPM in my BIOS. I didn't install any chip.
Your situation isnt the same as everyone else simply because... What I mean is... your Manufacturer's Motherboard isn't the same as an:
*ASROCK B450 SteelLegend.
^^^ (*) Updated to latest BIOS... there won't be any of what YOU have JUST mentioned.
"ONE OF THESE" motherboard "chips" MIGHT be ONLY solution for SPECIFIC mainboards. Friendly F.Y.I.
While the original comment gets me excited because I love virtualization in all its glorious forms, the reply just tickles me 😂 nothing trumps the helpful shade of techies ❤❤
i still can use bitlocker without TMP, is that means TMP is a second security to access hard disk?
If you have firmware tpm (fTPM) enabled it will act the same. FTPM is software based on the cpu. Just depends on which cpu you have that has that. But yeah I think TPM would be a second layer.
Seth I am not that tech savvy so what I would like to know is if I encrypt my C: drive when I power on the machine will it boot as normal or will I get a prompt to enter that password??
I'm thinking you'd need to enter a password. It's seems kinda like adding a PW to your user profile when you boot the machine up.
does this module work like app 1password?
so if this card is broken some day, the system is forever locked?
HI,,, I have turned on the TPM, and enabled trusted computing
my spec are:
ryzen3 3100
b450i aorus itx
8x2 ddr4 ram
but still not compatible for win 11, any suggestion? thx
What does the health test thing say to see if you can install windows?
I DO HAVE A T SHIRT LIKE YOUR AND PEOPLE'S DO LOVE IT
can you install tpm 2.0 on any tpm connector even if it is old?
I believe so yes. As long as you have the connector, you can get the appropriate module. Definitely consult your mobo's manufacturer site.
So... if I want to remove my hard drive that was being used on a motherboard with the TPM enabled, how do I use it on another PC?
In that case, you will be prompted for a "recovery key" -- enter that correctly, and voila -- you can use the drive.
@@PhrontDoor And where and when do I get that key?
@@mapache-ehcapam It should be displayed and saved when you enable bitlocker encryption.
Locking the drive with password doesn't use the TPM. BitLocker only uses the TPM if you encrypt the system drive.
The endorsement key(the preinstalled private key)that can't be removed is problematic for security. we do not know how the manufactorer created it secored it or if it has acces to therefore it is a perputual security risc
How to know where to connect it and which one is it
Consult your manual. It will help you know if you have one, where it is, and which TPM you need to buy if you need to get a physical module.
Time to make a new video talking about Widnwos 11 which now requires TPM 2.0
Prepare for a ton of traffic from people interested in upgrading to windows 11. Hopefully I can figure out how to go about this in my Alienware Aurora R10
Why? What does the tpm have to do with win 11?
@@MiddleofKnowhere Computers will need to have a TPM 2.0 if they want to upgrade to Windows 11. (great video btw)
@@MiddleofKnowhere Microsoft is forcing it going forward. The Alienware representative I messaged seemed to think that there may be some kind of software based solution (from AMD?). I honestly don't know enough about the topic to know if the CS rep actually knew what they were talking about.
Update. After rewatching your video I found that I do actually have a Tpm so when the Windows 11 test flights launch I will be ready.
wiondows 11 reqire's this TPM 2.0 or windows 11 would not install at all how much is it's price ???
I got my two modules for between $12 - $20
im have tpms1 18 pin i can install this chip or cant you TMP 14 pin
You can’t install a 14-pin on an 18-pin connector. You’ll need to find the right tpm for your mobo.
@@MiddleofKnowhere oh im see now Asrtock model same 18 pin thx :))
Can the TPM chip on a laptop mobo be replaced via BLR?
I do not know. It could be soldered on, which would mean no.
@@MiddleofKnowhere well with proper equipment, yes, but knowing which chip(s) and either reprogramming them, or soldering new ones in their place is a different story!
True. Also, I don’t know what blr stands for.
@@MiddleofKnowhere all right! BLR stands for Board Level Repair. Alex from Northridge, Louis from Rossmann group, Phil from theCod3r, and several others do BLR. Removing and replacing defective electronic components - capacitors, resistors, potentiometers, etc on a circuit board, like from a laptop, game console, tablet, and on, to fix them!
Gamers just want to upgrade to Win11 and now they are confused about TPMs xD
pretty much. That you can do it on a CPU level though with a firmware version is probably best for people not actually going to utilize all a TPM can do.
my first ones had it. I thought useless things and pulled out from board along with front speaker because beeping thingee. 😂
I got scared and removed everythings from board. threw away included cables and monitor, like scene from offices( i think)
If you remove drive letter via disk manager, your drive will be invisible to anyone
That's kinda cool. How do you see it then to use it?
@@MiddleofKnowhere www.google.com/amp/s/www.easeus.com/amp/partition-manager-software/hide-drives-windows.html
but is the question if you need it or not quite moot at this point?
you want windows 11? you need it.
you have a tpm 2.0 but a gen 7 CPU? you still don't get win 11. because reasons.
just saying...
Most CPUs have an fTPM so you don’t really need the physical module, especially to get win 11. It’s good to have if you want to secure your drives though as you can yank the module, put it in a safe deposit box, and effectively brick any data while you’re away.
@@MiddleofKnowhere here is my problem. I have a laptop with a gen 7 CPU. more precisely a i7 7700HQ. not windows 11 compatible. the i7820HQ is windows 11 capable. solid explanation on the difference? none... the 7820 is 100MHz faster, that's it.
oh, and it was used in a surface laptop.
so my move is now to move away from windows because if they don't want me to use win 11, then there are other option.
looks like you need that for windows 11
Not necessarily. Most modern CPUs do it at a Firmware level. Intel calls it PTT and AMD calls it fTPM. Just check your CPU in the BIO for those settings and if you see them you're good, otherwise, yeah you'll need a module provided your motherboard has the connector.
You now need one if you want to upgrade to Windows 11 for free.
EDIT: Do you need a TPM if you have an fTPM supported CPU?
ftpm is firmware based tpm integrated into AMD cpus. It's very different can than a separate TPM module. You can still set up bitlocker it seems (I didn't fully complete the set up) without the TPM module installed.
I enabled all the fTPM and Secure Boot settings in the UEFI(BIOS). It's detected fine by Windows 10, but the PC Health Check says it is not compatible with Windows 11. It's a fairly recent system, and well above minimum specs. I've pre-ordered a hardware TPM module before the scalpers buy up all available supplies! I can see Microsoft rolling back on this requirement if most of the users can't upgrade. They seem to be trying to force new hardware sales, with their associated OEM licensing of Windows. Not a good strategy when the supply chains are still shaky.
what! nothing about the encryption being stored on the company's hard drive ?
leaves out an important point , doesn't it?
It’s a high level overview and I pretty much state that fact and that I’m no expert on the issue. I had an IT friend check the video before publishing and he said it was good for what I was trying to communicate and that satisfied me.
Also, iirc with the physical module encryption is stored there not on the hdd.
Most CPU's have TPM built in no need for this module.
Correction, most CPUs within the last couple of generations (for AMD) have a firmware based TPM (fTPM). Zen does not, Zen+ I think does, Zen 2 and 3 do. Intel calls their's something different but they've had firmware based TPM since at least the 9k series if not 7k.
Know what sux about this?
These tiny little gizmos used to be only $6.00 on Newegg,
Now they are $80 to $120. Depending on your particular build.
So who's scalping who?
That is definitely crap. I made this video about a month prior to the Win 11 announcement. Mine cost 12 bucks for the TUF and 17 for the Dark Hero after the announcement 60 and up like you're saying. Terrible. And who knows how many incorrect modules people are buying since it's not the easiest to research.
Tpm is kinda useless for most people since they get software attacks which is why I don't ubderstand why windows forces this upon people
That’s interesting what do you mean by software vs hardware attacks? Wouldn’t a tpm help against software related viruses too? The research I did made it sound that way.
AMD has finally fixed their fTPM stuttering issue, so no need to buy one of these. It's built into the CPU already.
Windows 11 lol
very missleading video, how on earth tpm can protect you from ransomware?
Here let me google that for you: www.cybersecurity-insiders.com/now-we-have-hardware-to-protect-against-ransomware/
and if you watch the video, this came out a month prior to the Win11 announcement and I explicitly state that it's a basics video and I provide a whack-ton of links in the description for further research.
@@MiddleofKnowhere do you ever understand the article?
If the point of ransomware is to highjack your files via malware and then make you pay to get them back to you and the point of a tpm is to prouve an added layer of security your files through encryption then what do you think?
If files are secured behind an extra wall separated from the rest, ie a physical module, then yes a tpm can protect against ransomware. However, since you’re the one complaining why don’t you provide an answer?
@@MiddleofKnowhere TPM only store encryption keys of SED's, where that drive/partition (SED) separated via encryptions, which can also be done without TPM. Doing SED might impact performance but if it just a part to store sensitive data then it should be ok, and again it can be done without TPM. Relying only on TPM it self for me is not good enough as it create a single point of failure. What happen when TPM have vulnerability that leaks out their stored encryption keys? (this is a facts and happen before), any malware or cyber attack can take advantage and open up any encrypted drive/partition with ease. From what I can see, TPM are just to make things easier loke seamless decryptions (or encryptions), user won't have to interact by giving the keys or password to read/open (decrypt) the encrypted drive/partition/data, and that can also be done without TPM. Ransomware or not, when the access to write the data were open, it can still hits. Worst scenario like the one that attacks through vulnerability (zero-day, unpatched, etc etc) without any user interaction (like Wannacry). In the site you referring, TPM doesn't add that security layer, but by using anther security program that used TPM to store its keys and have automated verification when doing disk writing, that somehow will stop the ransomware from eating the files, and again, this can also be done without TPM. So no, windows 11 or average consumer don't need TPM, also, TPM is not a hardware encryption tools/acceleration or whatever, it just a module that store very sensitive data on hardware level (that why modern processor/motherboard can emulate this feature inside their firmware). The encryption/re-encryption acceleration hardware are way more expensive than TPM.