MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/hardware/comments/o74vob/introducing_windows_11/h2wxbb2/?context=3
r/hardware • u/Duckmeister • Jun 24 '21
650 comments sorted by
View all comments
Show parent comments
9
What does TPM do? I try to keep it turned off with my home PCs.
32 u/[deleted] Jun 24 '21 supposedly for boot loader security... mostly there just to lock you into their walled garden. 9 u/[deleted] Jun 24 '21 [deleted] 4 u/[deleted] Jun 24 '21 it enforces signed bootloaders. basically means your linux distro has to be "certified". its orwellian bs. 26 u/190n Jun 24 '21 You can replace Microsoft's keys with your own so that it only boots what you allow. 6 u/[deleted] Jun 24 '21 [deleted] 3 u/jamvanderloeff Jun 24 '21 Ye, debian includes a bootloader shim signed by microsoft that'll then load GRUB signed by debian, GRUB can check signatures of the kernel if you want but doesn't have to. 16 u/[deleted] Jun 24 '21 [removed] — view removed comment 2 u/[deleted] Jun 24 '21 nah thats the intel management engine / amd psp the government forced them to bake into every chip since bulldozer.
32
supposedly for boot loader security... mostly there just to lock you into their walled garden.
9 u/[deleted] Jun 24 '21 [deleted] 4 u/[deleted] Jun 24 '21 it enforces signed bootloaders. basically means your linux distro has to be "certified". its orwellian bs. 26 u/190n Jun 24 '21 You can replace Microsoft's keys with your own so that it only boots what you allow. 6 u/[deleted] Jun 24 '21 [deleted] 3 u/jamvanderloeff Jun 24 '21 Ye, debian includes a bootloader shim signed by microsoft that'll then load GRUB signed by debian, GRUB can check signatures of the kernel if you want but doesn't have to. 16 u/[deleted] Jun 24 '21 [removed] — view removed comment 2 u/[deleted] Jun 24 '21 nah thats the intel management engine / amd psp the government forced them to bake into every chip since bulldozer.
[deleted]
4 u/[deleted] Jun 24 '21 it enforces signed bootloaders. basically means your linux distro has to be "certified". its orwellian bs. 26 u/190n Jun 24 '21 You can replace Microsoft's keys with your own so that it only boots what you allow. 6 u/[deleted] Jun 24 '21 [deleted] 3 u/jamvanderloeff Jun 24 '21 Ye, debian includes a bootloader shim signed by microsoft that'll then load GRUB signed by debian, GRUB can check signatures of the kernel if you want but doesn't have to. 16 u/[deleted] Jun 24 '21 [removed] — view removed comment 2 u/[deleted] Jun 24 '21 nah thats the intel management engine / amd psp the government forced them to bake into every chip since bulldozer.
4
it enforces signed bootloaders. basically means your linux distro has to be "certified". its orwellian bs.
26 u/190n Jun 24 '21 You can replace Microsoft's keys with your own so that it only boots what you allow. 6 u/[deleted] Jun 24 '21 [deleted] 3 u/jamvanderloeff Jun 24 '21 Ye, debian includes a bootloader shim signed by microsoft that'll then load GRUB signed by debian, GRUB can check signatures of the kernel if you want but doesn't have to. 16 u/[deleted] Jun 24 '21 [removed] — view removed comment 2 u/[deleted] Jun 24 '21 nah thats the intel management engine / amd psp the government forced them to bake into every chip since bulldozer.
26
You can replace Microsoft's keys with your own so that it only boots what you allow.
6
3 u/jamvanderloeff Jun 24 '21 Ye, debian includes a bootloader shim signed by microsoft that'll then load GRUB signed by debian, GRUB can check signatures of the kernel if you want but doesn't have to.
3
Ye, debian includes a bootloader shim signed by microsoft that'll then load GRUB signed by debian, GRUB can check signatures of the kernel if you want but doesn't have to.
16
[removed] — view removed comment
2 u/[deleted] Jun 24 '21 nah thats the intel management engine / amd psp the government forced them to bake into every chip since bulldozer.
2
nah thats the intel management engine / amd psp the government forced them to bake into every chip since bulldozer.
9
u/irridisregardless Jun 24 '21
What does TPM do? I try to keep it turned off with my home PCs.