Re:How to verify boot firmware integrity if you prioritize n...
by nextaccountic on Wednesday August 28, 2024 @07:09AM
(#41378229)
The post is about the scenario where you disabled the TPM
[ Parent
| on HN ]
Re:How to verify boot firmware integrity if you prioritize n...
by fsflover on Wednesday August 28, 2024 @07:38AM
(#41378404)
I don't see it. The post says "when you use me_cleaner to neutralize intel ME, it also removes TPM", which is just not true for my system.
Re:How to verify boot firmware integrity if you prioritize n...
by PrimaryAlibi on Friday August 30, 2024 @10:42AM
(#41401216)
I made a mistake when I wrote the post mixing up disable and neutralized but I hoped everyone would understand I'm talking about disabling it.
Re:How to verify boot firmware integrity if you prioritize n...
by fsflover on Tuesday September 03, 2024 @10:31AM
(#41435350)
My Librem 14 has disabled ME; my Librem 15 has both disabled and neutralized ME. Both with Heads, TPM and Librem Key. I don't understand how the difference between disabled and neutralized matters here.
Re:How to verify boot firmware integrity if you prioritize n...
by PrimaryAlibi on Thursday September 05, 2024 @06:21AM
(#41455246)
Yeah I didn't know it was possible because some laptops have the TPM in a seperate chipset than the one that has intel me. I thought they only set the hap bit to neutralize but I learned here that they can also disable it on laptops that have TPM on a 2nd chipset.
Re:How to verify boot firmware integrity if you prioritize n...
by blendergeek on Wednesday August 28, 2024 @09:00AM
(#41378993)
Librem laptops have a TPM separate from Intel ME. The post is about if you have nuked the TPM built into the Intel ME. I'd say "have separate TPM" is a viable alternative.