Don't required TPM 2.0 and secure boot on Windows 11 unsupported PC?
if so; very good. if not; ☹️ some companies started TPM 2.0 and secure boot required on W11
Forum Discussion
26 Replies
Any work around a will be soon undone with patch after patch so your always fighting just to keep your os running .
Agreed, TPM isn't going to stop cheating unless Win11 only lets you install apps signed by Microsoft on your computer similar to how Sony only allows apps signed by them to be installed on ps5.
Even if Microsoft did do that, the TPM is soldered onto the motherboard which leaves the copper circuit traces between the TPM and CPU open to attack and signal manipulation compared to consoles which have the TPM fabricated into the CPU itself.
All a TPM does is store public keys from Microsoft or Sony.
The signatures are created from Microsoft or Sony's private keys, which are not stored on the TPM.
Another word for key is password. So TPMs store Microsoft or Sony's public password which is used to validate signatures.
So the public key validates that the signature came from Microsoft or Sony's private key, without knowing what the private key/password is. Hence, RSA public/private key cryptography. Pretty amazing stuff.
But if Microsoft let's people download and run any software they want off the internet, then people are going to use that software to find Win11 kernel exploits and bypass TPM signature checks through kernel level software hacks. The signature check won't even make it to the TPM module, because the system call will get intercepted and redirected through a software hack running in the kernel.
@OskooI_007TPMs do not have to be soldered. They can be installed post-production as well. Also, the only real evidence of a TPM being hacked is through directly "tapping" into it and even then it required bit-level analysis to find anything of value... extremely unlikely to happen to anyone on these forums.
You are correct about TPM being bypassed, but this only validates running a licensed, updated version of Windows 11, as @LOLGotYerTags mentioned. Zero-day attacks are always a concern, but the Insider Program and other concurrent initiatives are much better at finding and patching vulnerabilities than ever before.
Not to say a Windows 11 zero-day will not happen, but as I said earlier, I think it is much more likely that BIOS and firmware level attacks will supplant anything in or around the OS in the near future...- @LOLGotYerTags oh we agree sir, i will never recommend anyone running windows 11 not meeting the requirements, and on my daily driver i have tpm and all that jazz enabled. the laptop i mentioned is an old throw away for messing around with.
As for TPM being used for anti-cheat, idk know how that would work as there are actual workarounds, like using a dedicated TPM module, and then just buy a new one of those if you get caought cheating, so i guess TPM just would be a new "layer" to the hassle.
It is going to interesting tho to see how it goes for RIOT implementation it in their anti-cheat for Valorant @LOLGotYerTags saying BF2042 require only. Well see
