logoalt Hacker News

Gigachadtoday at 5:59 AM1 replyview on HN

I want this on my own homeserver. Protection against someone stealing the server without requiring me to type a password every boot.


Replies

zenopraxtoday at 6:17 AM

In what way is TPM protecting your data if someone steals the entire server? TPM only ensures that the boot environment has not been modified. Whatever key is being used to automatically decrypt the disk would be in the clear.

Unless I'm misunderstanding your situation, I think you should look up the "Evil Maid Attack" to better understand how to mitigate risk for your threat model.

show 1 reply