Trusted Platform Module
TPM
ELI5 — The Vibe Check
A TPM is a security chip on your motherboard that stores encryption keys, certificates, and passwords in tamper-resistant hardware. It verifies that your computer hasn't been tampered with at boot time. It's like a hardware password manager welded to your motherboard. Windows 11 requires a TPM 2.0 chip — Microsoft wasn't kidding about security.
Real Talk
A Trusted Platform Module (TPM) is a specialized chip (or firmware) that provides hardware-based security functions including secure key generation and storage, platform integrity measurement (PCR values), disk encryption key sealing (BitLocker), and remote attestation. TPM 2.0 is an ISO standard and a requirement for Windows 11.
When You'll Hear This
"BitLocker uses the TPM to seal the disk encryption key to the hardware state." / "TPM attestation proves the machine hasn't been tampered with at boot time."
Related Terms
Encryption
Encryption is scrambling your message into gibberish so only someone with the secret decoder ring can read it.
HSM (Hardware Security Module)
HSM stands for Hardware Security Module — a tamper-proof physical device that manages cryptographic keys. If someone tries to open it, the keys self-destru
Secure Boot
Secure Boot verifies that every piece of software that loads during startup is signed and trusted. Bootloader? Signed. Kernel? Signed. Drivers? Signed. If
Secure Enclave
A Secure Enclave is a tiny, isolated computer inside your computer that handles the most sensitive stuff — biometric data, encryption keys, payment info.