Today I noticed, in the Security Chip settings of my Thinkpad’s BIOS, that my security chip is set to “Active”.
If I’m not using AEM, is there any benefit to my Qubes install whatsoever to keeping this thing active? Or does it just introduce more attack surface?
Although you didn’t tell us which Thinkpad you have, It looks like this is TPM: one, two.
Can’t tell if your model is supported, but TPM could be used for AEM or Heads.
Yes, I believe it’s TPM.
So then, if I don’t use AEM or Heads, does TPM serve any purpose to Qubes? Would turning it off change anything?
Turning it off should not change anything if you don’t use it.
2 Likes