The TPM And Linux

After several weeks of research I'm here to share information about the TPM (Trusted Platform Module) that Microsoft had a collaboration with AMD, Intel and Qualcomm.

This article (How Windows Uses The Trusted Platform Module) in this URL is filled with lot's of information on the TPM:

https://docs.microsoft.com/en-us/windows/security/information-protection/tpm/how-windows-uses-the-tpm

If you want to dual boot Linux and Windows 11 it's a little bit different.

I recommend that you install Windows 11 first. Then install Linux.

Now depending on what Linux distro you are installing, the installer may automatically install Linux alongside of Windows 11 so you don't have to worry about shrinking your Windows 11 partition.

The installer that comes with Ubuntu and Linux Mint works to automatically install Linux alongside of Windows.

After having a discussion with a Ubuntu Moderator I learned that with a dual boot (Windows 11 & Linux) you have to go to the CMS BIO Compatability in the BIOS to make adjustments and you have to install MOK on your Linux distro.

MOK stands for Machine Owner Key and it has to be implemented in the BIOS to scene the boot process.

I've provided a few links for MOK however; when you have time you should read up on MOK 'before' you plan your next PC build.

https://www.linuxadictos.com/en/mok-que-es.html

This article talks about MOK too, further down on that Ubuntu WiKi page.

https://wiki.ubuntu.com/UEFI/SecureBoot

Download for MOK:

https://github.com/linux-surface/secureboot-mok/releases

***If you just want to install Linux on your brand new desktop computer build OR your laptop you can.*** You just have to go into the BIOS under the 'Security' section of the BIOS and disable the TPM. All motherboards BIOS are different so if you can't find it right away, don't panic. Take your time and look around.

If you still can't find in your BIOS the section in which to disable the TPM you may have to call your motherboards manufacturer.

You can disable the TPM module in the BIOS:

For those worried about Microsoft's Pluton TPM chip: Lenovo won't even switch it on by default in latest ThinkPads

https://www.theregister.com/2022/01/20/microsoft_amd_pluton_lenovo/

This article refers to the Pluton processor:

https://www.microsoft.com/security/blog/2020/11/17/meet-the-microsoft-pluton-processor-the-security-chip-designed-for-the-future-of-windows-pcs/

At first the TPM was on the motherboard.

I'm now doing research on the TPM being integrated into the CPU and how that works.