I use PopOS and I wonder does the TPM processor in my CPU get used for anything out of the box? If not, what could it be used for? Have you guys got practical advice?
I use PopOS and I wonder does the TPM processor in my CPU get used for anything out of the box? If not, what could it be used for? Have you guys got practical advice?
The TPM could be used to generate a LUKS decryption key from a password or PIN.
That would tie that password to the hardware, but with LUKS you can have multiple ones, so a long password that directly unlocks the key should be possible in addition
This is probably the main reason every mainboard has TPMs now, since all common operating systems (Android, iOS/MacOS and Windows) do it.
From what I heard the Ubuntu installer offers a version that doesn’t suck (if secure boot is enabled at install time) so using that is probably fine, but I would beware of trying to DIY it since it’s easy to do incorrectly, most guides are wrong, and you will likely end up with easily bypassable encryption.