Would using a TPM Module strengthen Secure Boot?

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   Hi,

I'm planning to buy an Intel socket ASRock H310CM-HDV motherboard soon to assemble my new home PC and so I would appreciate it if someone could answer this question for me because if the answer is yes then I will defiantly want to buy a compatible ASRock TPM module as well (is this motherboard compatible with the ASRock TPM 2.0 module?) having had malware problems on one of my past PCs despite using security software and being cautious about what I executed on it.

I've read that although Secure Boot does not require a PC to have a TPM in order to function its recommended that a TPM be used to strengthen it, with TPMs being the safest place to store cryptographic keys.

So if I used a TPM module with this motherboard would its firmware have been implemented to take advantage of detecting the presence of a TPM module by using it to strengthen Secure Boot such as by storing its keys in the TPM instead of wherever else they would be stored if no TPM was available to store them in?

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
Joe789 Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 12 Jul 2020 Status: Offline Points: 4	Post Options Post Reply Quote Joe789 Report Post Thanks(0) Quote Reply Topic: Would using a TPM Module strengthen Secure Boot? Posted: 12 Jul 2020 at 6:56pm
	Hi, I'm planning to buy an Intel socket ASRock H310CM-HDV motherboard soon to assemble my new home PC and so I would appreciate it if someone could answer this question for me because if the answer is yes then I will defiantly want to buy a compatible ASRock TPM module as well (is this motherboard compatible with the ASRock TPM 2.0 module?) having had malware problems on one of my past PCs despite using security software and being cautious about what I executed on it. I've read that although Secure Boot does not require a PC to have a TPM in order to function its recommended that a TPM be used to strengthen it, with TPMs being the safest place to store cryptographic keys. So if I used a TPM module with this motherboard would its firmware have been implemented to take advantage of detecting the presence of a TPM module by using it to strengthen Secure Boot such as by storing its keys in the TPM instead of wherever else they would be stored if no TPM was available to store them in?

Joe789 Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 12 Jul 2020 Status: Offline Points: 4	Post Options Post Reply Quote Joe789 Report Post Thanks(0) Quote Reply Posted: 17 Jul 2020 at 4:36am
	I don't require an answer to this forum topic now as I've now ended up choosing to buy an MSI motherboard instead.

ASRock_TSD Members Profile Send Private Message Find Members Posts Add to Buddy List ASRock_Official Joined: 20 Mar 2015 Status: Offline Points: 8907	Post Options Post Reply Quote ASRock_TSD Report Post Thanks(0) Quote Reply Posted: 17 Jul 2020 at 11:55am
	Dear Joe, Thanks for posting! Sorry for the late reply. Yes, the H310CM-HDV supports the TPM module. The module can be installed on the pg.7 #13 header. https://download.asrock.com/Manual/H310CM-HDV.pdf Please refer to the following link for the TPM2.0 reference. https://www.asrock.com/mb/spec/card.asp?Model=TPM-S%20Module With thanks, ASRock TSD Edited by ASRock_TSD - 17 Jul 2020 at 11:56am