I just can't seem to find enough information on Trusted Platform Module (TPM). I did find a few threads but they're only about TPM 1.2 setup.
The setup I want: the whole disk is encrypted (including free space) and the key is saved in TPM so it's not prompted on bootup. I only have to enter the password once at the login screen.
This is how it is done on Windows currently.
My questions are:
- When to set up the TPM: during the initial installation stage, or afterwards?
- How to set up TPM? I read about
tpm-tools
andtrousers
but only for TPM 1.2?
Has anybody successfully set up TPM 2.0, and any detailed instructions?