Does Manjaro ever use TPM?

[MirceaKitsune]

This is more of a curiosity though one I had for some time. I have a modern motherboard as of the past years, it supports TMP 2.0. I know everyone’s been talking about how Windows 11 (a monstrosity I’m grateful I don’t need to touch) requires it and won’t even support machines without that.

For Linux and Manjaro in our case, I was curious if TMP has any use. Are there any system functions that make use of this system for added security? Does GRUB use it when booting by default, if the module is detected upon installing? Any kernel / systemd modules or other common processes?

[Tomek]

@MirceaKitsune

Are there any system functions that make use of this system for added security?

By default, TPM is not used (but is available natively in Linux). You can use it for securing your boot, SSH keys, encrypted drives and more. See Trusted Platform Module - ArchWiki

[Hanzel]

See this excellent tutorial on the use of TPM to boot as one example of a use case:

[HowTo] Using Secure Boot and TPM2 to unlock LUKS partition on boot

Difficulty: ★★★★★

Note

This tutorial is almost complete, it lacks only good formatting and one tiny addition which is not necessary but brings a bit of polish to the end result. Formatting, I’ll do it in a couple of days. Sorry for that. I just feel that if I postpone publishing this again then I forget about it for weeks or even months (again) - that has already happened a couple of times By its nature this post is a response to the question once asked by <…

[Kobold]

@MirceaKitsune

For Linux and Manjaro in our case, I was curious if TMP has any use. Are there any system functions that make use of this system for added security?

Im so glad there is no (default) active TPM support going on… because you lost your control and have to blindy trust Microsoft (Pluto) and/or the CPU/Mainboard Vendor and if the company gets invaded by hackers, your security and files are gone when you use your Passwords somewhere else.

I think there is no need to talk about the GAG order in the usa.

TPM/Pluto is the new PC cancer…

[MirceaKitsune]

I’d definitely only want it for optional things myself, and to know when it’s being used. Figured it can have uses as a secondary system for special security still, like creating zip archives that can only be decrypted on the computer you wrote them from yet you can keep them on an USB stick.