Does TPM protect BIOS?

Does TPM protect BIOS?

TPM does have the ability to check BIOS, its the chain of trust that propogates. Check both static and dynamic root of trust for protocols and see what suites you best. And again be sure why u want to protect the BIOS and what is it that you really want to protect.

How do I use TPM secure boot?

TPM

1. Reboot your PC.
2. Get into the UEFI settings via the steps we described in the Secure Boot section above.
3. Look under the Security Section.
4. Look for TPM Security or TPM Device, and make sure it’s turned on or enabled.
5. Save and apply the settings using the listed key combination.
6. Exit and restart your PC.

Does UEFI use TPM?

Taking charge of the boot path, the UEFI uses the TPM to measure the integrity of each firmware instance, device driver, or operating system module before it loads. When necessary, it also allows backward compatibility with traditional BIOS operations.

How do I use a TPM to protect my BIOS?

BitLocker e.g. uses Sealing to bind the keys needed to decrypt your HD to those measurements. That means, your HD keys can not be used, if malware corrupts your firmware. So, on Windows you can use BitLocker to protect against tampering of your firmware. I am not aware of something similar for Linux (though something might exist).

How does the UEFI work with the TPM?

Taking charge of the boot path, the UEFI uses the TPM to measure the integrity of each firmware instance, device driver, or operating system module before it loads. When necessary, it also allows backward compatibility with traditional BIOS operations. This establishes a strong root of trust before the user begins business processing.

How does an attestation by the TPM work?

Attestation by the TPM – This is “An operation that provides proof of data known to the TPM. This is done by digitally signing specific internal TPM data using an AIK. The acceptance and validity of both the integrity measurements and the AIK itself are determined by the verifier.

How does the TPM help in computer security?

The TPM is a cryptographic module that enhances computer security and privacy. Protecting data through encryption and decryption, protecting authentication credentials, and proving which software is running on a system are basic functionalities associated with computer security. The TPM helps with all these scenarios and more.