Add back in TPM docs 4

This commit is contained in:
Frank Rojas 2023-04-26 15:20:43 -04:00
parent d087c09cd2
commit 3f9082c6d3

View File

@ -37,7 +37,7 @@ Starting with Windows 10, version 1607, Windows doesn't retain the TPM owner pas
> - **TPM 2.0**: Keep the lockout authorization. > - **TPM 2.0**: Keep the lockout authorization.
> - **TPM 1.2**: Discard the Full TPM owner authorization and retain only the Delegated authorization. > - **TPM 1.2**: Discard the Full TPM owner authorization and retain only the Delegated authorization.
> >
> Unless it's changed to 4 before the TPM is provisioned, the owner password isn't be saved. > Unless it's changed from 5 to 4 before the TPM is provisioned, the owner password isn't saved.
Only one owner password exists for each TPM. The TPM owner password allows the ability to enable, disable, or clear the TPM without having physical access to the computer, for example, by using the command-line tools remotely. The TPM owner password also allows manipulation of the TPM dictionary attack logic. Windows takes ownership of the TPM as part of the provisioning process on each boot. Ownership can change when you share the password or clear your ownership of the TPM so someone else can initialize it. Only one owner password exists for each TPM. The TPM owner password allows the ability to enable, disable, or clear the TPM without having physical access to the computer, for example, by using the command-line tools remotely. The TPM owner password also allows manipulation of the TPM dictionary attack logic. Windows takes ownership of the TPM as part of the provisioning process on each boot. Ownership can change when you share the password or clear your ownership of the TPM so someone else can initialize it.