Skip to content
CyberHardware

U2 · Topic

TPM & secure enclaves

Every modern laptop and server ships with a root of trust. This area explains what a TPM actually protects, how PCR measurements and sealing work, where firmware TPMs and secure enclaves differ, and how to use them for disk encryption and attestation.

  • TPM 2.0
  • Secure Boot
  • Enclaves

Guides in this topic

  1. TPM 2.0 explained: secure boot and sealed disk keys

    What a TPM 2.0 really protects, how PCR measurements and sealing work, discrete versus firmware TPMs, and how to bind BitLocker or LUKS to the boot chain.