Does the functionality of an external hardware key overlaps 100% with the one provided by an embedded security chip on a laptop? Or can they complement each other?

Although I assume an external key is safer and more practical (device portability) I wonder if they can complement a TPM chip

  • Not sure if they are talking about the same, but yubikey guys have a doc about full disk encryption and pre-boot-authentication. I wonder if they TPM == PBA in that doc. – bradbury9 Jul 25 '18 at 7:45
  • Closest thing I have seen is this: LUKS + Yubikey + AEM which is an implementation of the full disk encryption paper of the yubikey guys. The AEM is descrived here – bradbury9 Jul 25 '18 at 12:46
  • In windows there are guides on TPM + bitlocker + yubikey – bradbury9 Jul 25 '18 at 12:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.