Does CPU-based TPM survive a BIOS reset?

[Quartz]

Intel call it PTT and AMD call it FTPM. But suppose you have a TPM-secured OS on your PC and you update or reset your BIOS. Does your OS still boot? Does everything still work?

 

[Quartz]

Good question, someone with W11 should test it.

Can't W10 be TPM-secured?

 

[Quartz]

Hi, I enabled fTPM in BIOS and updated my Win10 Pro VM to Win11 Pro.

AIUI Windows 11 disables TPM anyway if it detects that its in a VM.

The BIOS says, if bitlocker is on and you disable TPM windows will not boot or encrypted data will be lost.

So it's not saved in the UEFI. Shame.

 

[Quartz]

I don't know what this means, but my Asus motherboard says in the manual that it is stored in the ME and only says that a ROM replacement would invalidate the key, not a BIOS update or CMOS reset.

Excellent.

 

[Quartz]

Motherboard failure = all data lost. What a wonderful security feature!

This is not a problem in some sectors. Your IT department just gives you a new PC or laptop and you download your data from the server.