• @Corngood@lemmy.ml
    link
    fedilink
    English
    510 days ago

    It won’t boot though, because the keys to decrypt the system are stored in the TPM.

    Sure you could replace the whole OS, but that’s going to be very obvious and won’t allow you access to the data.

      • PHLAK
        link
        fedilink
        English
        510 days ago

        If you enable Secure Boot you should also set a BIOS password for this very reason.

          • AlphaOmega
            link
            fedilink
            English
            410 days ago

            Not sure if this works these days, but on older systems there was a reset bios config jumper and pulling the cmos battery.

      • @Miaou@jlai.lu
        link
        fedilink
        English
        110 days ago

        Can’t access the bios with secure boot on (at least I could not on an old laptop I was refurbishing, thank god the owner could login into windows)

        • @jjjalljs@ttrpg.network
          link
          fedilink
          English
          110 days ago

          That’s unusual, I think. Every computer I’ve had that had it on, I was able to turn it off when I went to install Linux.

    • @atticus88th@lemmy.world
      link
      fedilink
      English
      210 days ago

      Isnt it possible to have a recovery key? Isnt that technically a backdoor? Maybe the terms are not correct but there is a way in physically.