logoalt Hacker News

evanjrowleylast Wednesday at 9:45 PM2 repliesview on HN

My eyes have opened up to the pitfalls of TPM recently while upgrading CPUs and BIOS/UEFI versions on various hardware in my home.

VMs typically do not use TPMs, so it is not surprising that the feature was not being used there. One common exception is VMware, which can provide the host's TPM to the VM for a better Windows 11 experience. One caveat is this doesn't work on most Ryzen systems because they implement a CPU-based fTPM that VMware does not accept.


Replies

bdavbdavlast Wednesday at 10:38 PM

AIUI most hypervisors offer vTPM - it’s disabled by default often, but most solutions have it (including Proxmox / KVM (using swtpm)

asciiilast Thursday at 2:44 AM

I did not realize that the fTPM on CPU can also cause speed lags and stuttering because of the overhead of security stuff