Re:Installing Windows 11 on Legacy BIOS Without Secure Boot
by mjg59 on Saturday June 26, 2021 @08:20PM
(#27647279)
No. Every TPM has a factory-supplied unique key called the endorsement key, but every other key on the TPM is randomly generated on the TPM. The keys you actively use /can/ be tied back to the endorsement key, but there's no need for them to be - for most cases, any cryptographic material you generate on the TPM will be indistinguishable from material you generate on the CPU, other than to the local client.
[ Parent
| on HN ]
There are no comments on this comment yet.