Trusted Platform Module (TPM) 2.0 is a hardware or firmware based security feature that is designed to provide a secure storage area for cryptographic keys and to facilitate secure boot and secure measurement processes. TPM 2.0 is an improvement over the previous version, TPM 1.2, and provides additional features and functionality. TPM is a requirement for Windows 11.

Hardware TPM 2.0

Hardware-based TPM 2.0 is a physical chip that is installed on the motherboard of a computer. Depending on the motherboard the TPM chip can either be soldered onto the motherboard or it can be a removable module plugged into pins on the motherboard. It is a dedicated microcontroller that is specifically designed to store and manage cryptographic keys and to perform cryptographic operations. Hardware-based TPM 2.0 has several advantages over firmware-based TPM 2.0. It is more secure because it is a dedicated chip that is isolated from the rest of the system, and it is less susceptible to software attacks. It is also more reliable because it is a separate component that is not dependent on the operating system or other software.

Firmware TPM 2.0

Firmware-based TPM 2.0 is a software implementation of the TPM 2.0 specification that is stored in the system’s BIOS or UEFI firmware. It is not a physical chip, but rather a set of instructions that are executed by the system’s CPU. Firmware-based TPM 2.0 has several advantages over hardware-based TPM 2.0. It is less expensive because it does not require a dedicated chip, and it is more flexible because it can be updated or modified through firmware updates. However, it is less secure than hardware-based TPM 2.0 because it is vulnerable to software attacks and it is dependent on the operating system and other software.

Bitlocker

BitLocker is a full-disk encryption feature that is included with certain editions of Microsoft Windows. It is designed to protect data by encrypting the entire drive, including the operating system, system files, and user data. BitLocker uses the TPM to store the encryption keys and to ensure that the system has not been tampered with.

When BitLocker is used with a TPM, the TPM generates a key and stores it in its secure memory. The key is used to encrypt the drive, and the TPM ensures that the key is only released to the system if the system has not been tampered with. This helps to prevent unauthorized access to the data on the drive.

In order to use BitLocker with a TPM, the TPM must meet certain requirements. The TPM must be version 2.0 or higher, and it must be enabled and activated in the system’s BIOS or UEFI firmware. The system must also have a TPM-compatible BIOS or UEFI firmware, and the operating system must support TPM 2.0.

Conclusion

In conclusion, Trusted Platform Module TPM 2.0 is a hardware-based or firmware-based security feature that is used to secure data by storing cryptographic keys and facilitating secure boot and secure measurement processes. It is required by BitLocker, a full-disk encryption feature included with certain editions of Microsoft Windows, in order to protect data by encrypting the entire drive. To use BitLocker with a TPM, the TPM must meet certain requirements, including being version 2.0 or higher and being enabled and activated in the system’s BIOS or UEFI firmware. The system must also have a TPM-compatible BIOS or UEFI firmware, and the operating system must support TPM 2.0.

Contact Ram PC Systems for computers with TPM 2.0 and Windows 11 support.