My laptop is encrypted with BitLocker with TPM-Only protection and Secure Boot is enabled. Since I do not have any UEFI password set to prevent changes to the UEFI firmware settings, will an attacker still be able to read and access the encrypted hard drive? My recovery key is stored in a secure place away from the laptop. I am the only user using the laptop.
I just need to prevent my data from being read and accessed.
So my question is, even without setting a UEFI/BIOS password, can the encrypted data be read on the hard drive?
Of course, an attacker can just change the UEFI/BIOS settings, disable Secure Boot, and boot from a malicious program. But, will the attacker still be able to read the contents of the encrypted hard drive?