Hardware security: The use of a Trusted Platform Module Juan José López Jaimez A01361534

Why hardware security? Imagine that your computer gets robbed…… Would the thief be able to access your documents? Scenario 1: Not so intelligent thief, can’t go further than the windows/OS Password and just formats your laptop and sells it Scenario 2: A person with the knowledge to bypass the windows password seeks to steal your information

Why hardware security? How to prevent the scenario 2? a) set a BIOS password: But what if the attacker unplugs your hard drive and then just connects it to another computer

Why hardware security? Solution: Encrypt your HDD.

Why hardware security There are other problems… How can you make sure that you can protect your intelectual property (IP) How can you be sure that your operating system was not modified by an attacker?

Hardware security: What is a TPM TPM (Trusted Platform Module) is a computer chip (microcontroller) that can securely store artifacts used to authenticate the platform (your PC or laptop). These artifacts can include passwords, certificates, or encryption keys. A TPM can also be used to store platform measurements that help ensure that the platform remains trustworthy.

Function implemented on a TPM Generate Primary keys Symmetric Assymetric Sign Keys Encrypt data Decrypt data

Hardware security: How?

Hardware security: How? Secure Boot is a security standard developed by members of the PC industry to help make sure that your PC boots using only software that is trusted by the PC manufacturer. When the PC starts, the firmware checks the signature of each piece of boot software, including firmware drivers (Option ROMs) and the operating system. If the signatures are good, the PC boots, and the firmware gives control to the operating system. The following versions of Windows support Secure Boot: Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 8, Windows Server 2012, and Windows RT.

How to get one? Some laptops already come with one integrated on the Motherboard If the motherboard has a compatible sloth, just buy one and plug it in (you may have to flash your bios)

Sources: Trusted Platform Module (TPM) Summary | Trusted Computing Group. (2008). Retrieved October 31, 2016, from http://www.trustedcomputinggroup.org/trusted-platform-module-tpm-summary/ Secure Boot Overview. (n.d.). Retrieved October 31, 2016, from https://technet.microsoft.com/en- us/library/hh824987.aspx