What does a TPM do?

[RadiatingLight]

so basically I know that laptops & computers that have TPMs can have their drives encrypted, but not require a password on boot. this is awesome, and I want one.

My motherboard (ASUS Z97-A) Has a spot for a TPM, and they're like 13USD, so why not?

 

but what will installing a TPM do to my existing install of windows 10? will I have to re-install completely? also what happens when the TPM is removed and the system tries to start up?

[JefferyD90]

1 minute ago, RadiatingLight said:

so basically I know that laptops & computers that have TPMs can have their drives encrypted, but not require a password on boot. this is awesome, and I want one.

My motherboard (ASUS Z97-A) Has a spot for a TPM, and they're like 13USD, so why not?

 

but what will installing a TPM do to my existing install of windows 10? will I have to re-install completely? also what happens when the TPM is removed and the system tries to start up?

A TPM gives you the ability to transfer the credentials to another computer, that's my biggest benefit of it.  Additionally, it allows business to manage the credentials easily.

[RadiatingLight]

Just now, JefferyD90 said:

A TPM gives you the ability to transfer the credentials to another computer, that's my biggest benefit of it.  Additionally, it allows business to manage the credentials easily.

what credentials? what do you mean?

[JefferyD90]

Just now, RadiatingLight said:

what credentials? what do you mean?

Credentials = Bio Metric data

Credentials = Encryption Keys

Credentials = Saved passwords

 

etc.

[RadiatingLight]

Just now, JefferyD90 said:

Credentials = Bio Metric data

Credentials = Encryption Keys

Credentials = Saved passwords

 

etc.

So the TPM stores your bitlocker encryption codes on it? seems strange.

all I want a TPM for is to boot up my computer/install updates without needing to constantly unlock my SSD by entering in a password, because I do have it encrypted using bitlocker.

 

also, going back to my original question, can I just pop a TPM in, or do I need to re-install my OS.

[JefferyD90]

4 minutes ago, RadiatingLight said:

So the TPM stores your bitlocker encryption codes on it? seems strange.

all I want a TPM for is to boot up my computer/install updates without needing to constantly unlock my SSD by entering in a password, because I do have it encrypted using bitlocker.

 

also, going back to my original question, can I just pop a TPM in, or do I need to re-install my OS.

*looks around* that's what I just said...

 

And your OS needs to be configured to support the TPM, occasionally it will require you to have a additional utility.

[ItsTheDuckAgain]

This one click and this one ClickMeToo will get you set. Actually it's pretty straight forward. Everything you asked is covered in those two articles, the 2nd one referencing to ASUS Mobos.

[fjdhdhcyfhf]

The purposes of TPM is in the name; Trusted Platform. It allows the detection of hardware and software changes. I cannot confirm if you need to re-install or re-encrypt your drive; I don't use it. I imagine you would need to reinstall to make use of the TPM key. If you remove TPM then your computer will not boot, thats the purpose of it.

 

TPM and bit locker will verify your OS before booting. You can judge for your self if you thank that is useful. I wouldn't use it because I do not think It will protect you from the threats you face. It won't protect you from key loggers, drive by downloads, or malware. IMO if you do not have 100 devices that you are responsible for managing; you do not need TPM