Reputation
289
Top tag
Next privilege 300 Rep.
Create new tags
Badges
1 11
Newest
 Curious
Impact
~7k people reached

Mar
4
accepted What is the correct way to remove bitlocker secrets from a TPM when returning a device for warranty?
Dec
9
answered What is the correct way to remove bitlocker secrets from a TPM when returning a device for warranty?
Dec
9
comment What is the correct way to remove bitlocker secrets from a TPM when returning a device for warranty?
I just tested this procedure on Surface Pro 2. What this actually does is "enable, activate, clear, enable, and active the TPM." I suppose the purpose is to clear everything but bitlocker keys. The device behaves exactly the same after clearing as before: Boots to bitlocker PIN prompt, enter prompt, Windows boots, bitlocker is shown as enabled. Clearing the TPM definitely does not clear the system volume bitlocker key from the TPM.
Dec
3
comment What is the correct way to remove bitlocker secrets from a TPM when returning a device for warranty?
Hmm...I thought I tested that procedure with the result that Windows can still reboot after clearing the TPM. Now I'm not so sure. I'll have to test this again to be sure.
Dec
3
comment What is the correct way to remove bitlocker secrets from a TPM when returning a device for warranty?
Both of those links refer to procedures that AFAICT write the keys to the disk in plaintext.
Dec
3
revised What is the correct way to remove bitlocker secrets from a TPM when returning a device for warranty?
added 340 characters in body
Dec
3
comment What is the correct way to remove bitlocker secrets from a TPM when returning a device for warranty?
@NeilSmithline I don't see how making a backup would reduce the likelihood of sensitive data being recovered by an attacker. What did you have in mind for "removing the data"? It's not generally possible to securely wipe files from modern computers.
Dec
2
revised What is the correct way to remove bitlocker secrets from a TPM when returning a device for warranty?
edited title
Dec
2
asked What is the correct way to remove bitlocker secrets from a TPM when returning a device for warranty?
Jun
16
comment IPhone iOS 8.3 encryption security against physical access
related question
Feb
13
awarded  Curious
Feb
12
comment Are there other roots of trust on my computer aside from these 46 root certificates?
Thanks Eric. It looks like the reason for the discrepancy is that Windows automatically updates the root certificate store as needed.
Feb
12
accepted Are there other roots of trust on my computer aside from these 46 root certificates?
Feb
12
comment Are there other roots of trust on my computer aside from these 46 root certificates?
I just confirmed this. Going to hongkongpost.gov.hk/index.html results in Hongkong Post Root CA1 added to the "Trusted Root Certification Authorities".
Feb
12
comment Are there other roots of trust on my computer aside from these 46 root certificates?
Can you tell me exactly where you found the Hong Kong Post office root certificate? I've checked on both my windows 7 and 8.1 machines and haven't found it.
Feb
12
revised Are there other roots of trust on my computer aside from these 46 root certificates?
added 76 characters in body
Feb
12
asked Are there other roots of trust on my computer aside from these 46 root certificates?
Feb
12
accepted Does a valid code signing certificate mean that an installer has not been tampered with in transit?
Feb
12
comment Does a valid code signing certificate mean that an installer has not been tampered with in transit?
I'm using a script to automate download and validation, so I suppose I could fairly easily assert that the publisher and chain of trust remain the same. I wonder how consistent the certificates used to sign code actually are from update to update.
Feb
11
awarded  Critic