Timeline for How does Bitlocker + TPM prevent me seeing the HDD contents with another OS?
Current License: CC BY-SA 4.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 25, 2019 at 11:57 | comment | added | Wang | There is no way to share owner password when you are using win10. The win10 use random number as owner password during setup and then discard it. There is no way to recover or record this password. And TPM will refuse to give keys when the measurement detects it is not boot into original windows. Even if you have the owner password you can only change the password or clear the keys. It does not allow you to decrypt stuff. | |
| Aug 8, 2018 at 22:32 | comment | added | Neilski | Are you saying that the owner password allows an "unseal" to take place even when the PCR measurements don't match the requirements? Also, I would assume that the owner password will not be accessible to a thief in most cases ;-) | |
| Aug 7, 2018 at 22:56 | comment | added | Filipe Rodrigues | The key itself is never acessible. It is "sealed" inside the TPM so only authorized applications can use it. So if linux somehow has access to the tpm owner password, it can act as an owner and use the keys (by "use" I mean encrypt/decrypt, not export, but since this is what is needed for Bitlocker) | |
| Aug 7, 2018 at 22:36 | comment | added | Neilski | Thanks, but I don't see anything here which really addresses my question about how a Linux system wouldn't be able to pretend to be the authorised boot loader and get the key from the TPM. | |
| Aug 1, 2018 at 7:29 | history | answered | Filipe Rodrigues | CC BY-SA 4.0 |