Wave Systems Corp. (fka WAVXQ)

[Ispro]

Lugan, zen, sorry to step in.............

This is the WEAKNESS (if one can call this weakness) of a NON TPM enabled FDE.

A removeable RootOfTrust has no machine binding. So if the thieves know your pin they can install the drive in another machine and boot the disc.

If the password is stored IN the TPM they have to KNOW the password and have to boot it in YOUR machine to reconfigure it to work in other machines.

But since most the hole laptop is stolen this doesn´t matter. They have to know the pin!

BR

ISPRO