Windows 10: Windows 11 - How to prepare for a crash of a TPM device

Hi all,I tried this question in other forums. Unfortunately without any response. So I wonder why this question is either extremely silly or everybody believes in perfect hardware.So let's try it again: I use TPM not only to support MS functionality like Bitlocker but also to store private keys for other ciphering tasks used in applications. So I would like to prepare for a hardware crash that destroys the TPM device.Does EFS stores its private keys in the TPM device?TIA.

:)

 

TPM and Windows 11.

Windows 11 requires TPM 2.0 to be present and enabled. No, TPM can only be enabled or disabled in the bios. A lot of OEMs seem to be issuing bios updates recently, with the sole purpose of changing their bios default from disabled to enabled in preparation for W11.

Just because TPM is enabled doesn't mean it will be in use. Whether its used or not, that is a user setting within Windows, W10 or W11.

 

Need help on whether to clear TPM on not

It's clear as mud. As far as I can tell, it's specific to Windows, not necessarily activated programs like MacAfee, games, etc etc etc. MS Office, I have no idea.

Here's a lengthy doc on it: https://docs.microsoft.com/en-us/wi...initialize-and-configure-ownership-of-the-tpm

 

Windows 10 devices now requires hardware encryption/TPM

Stolen from Sweclockers, but it's in swedish.

So from now on devices (OEM built) needs a TPM module. Relevant bit:

Pretty interesting, but there's tons of questions I guess. I don't actually now anything about how TPM works, just that it's hardware, meaning the key is stored in a physical chip and that the decryption has to run through this chip. But I have no idea how let's say biometrics is tied to this. Or what the implications will be, or what exactly is encrypted. The entire storage or just the log in details as such?