The risks of TPM?
The risks of TPM?
I work extensively with TPM technologies, especially after upgrading from a WS Z390 Pro motherboard that included a detachable TPM. These codes help integrate your BitLocker encrypted storage smoothly during startup, though certain protections apply. With a removable TPM, you can relocate the TPM to a new board and use the drives without any configuration. If you lack a removable TPM, follow these steps: when first setting up an encrypted drive, you’ll need to save your decryption key to your Microsoft account (required for Windows 11). This key can be accessed either automatically after boot or via another device if you’re using it as the boot drive. You may print the key or store it on a separate storage medium. Regardless of method, the process is secure and most users simply upload the information to their account or email it themselves. Note: If you need further details, refer to the guide mentioning the "Manage BitLocker" interface in Windows 11.
You can activate BitLocker via software on your system even without a specialized hardware TPM by following the instructions in the section titled "How to enable (software-based) BitLocker on the operating system drive." This should clarify the process.
I agree, I also have both machines equipped with TPM and the USB method.
I've been using TPM and Bitlocker for about two years, there is nothing to worry about. Let me tell you what will happen. I flash my BIOS and clear CMOS quite frequently (sometimes even a failed/bad flash), and AMI BIOS bumps out some message says something like "you changed your CPU so your fTPM is bad, press Y to clear all fTPM keys, press N not to clear" after the PC POSTs. When you press N, the PC reboots and shows the same message. When you press Y, Win10 will ask you for recovery key (if and only if your OS drive is encrypted). Then if you set up Windows Hello, Windows will ask you to reset your PIN by logging into your Microsoft account using your regular password (not PIN). So yeah...as long as you saved your recovery key there is nothing to worry about even if all the keys in fTPM are cleared.