Readit News logoReadit News
PragmaticPulp · 4 years ago
Until VirtualBox implements TPM 2.0 pass through, which they've already started working on: https://www.virtualbox.org/changeset/90946/vbox

Qemu already supports TPM pass through and secure boot.

mindslight · 4 years ago
As a QEMU user, why would I ever allow a Windows VM to talk to a real TPM? The entire point of a VM is to isolate Windows in a predictable and secure manner. Giving it access to a unmanageable coprocessor that has been designed to undermine my own interests completely destroys this goal. Hopefully this restriction will simply be cracked in the popular Windows torrents, or better yet some real TPM keys leak for use with emulators. But more likely by the time any application specifically requires Windows 11 to run, Windows will have faded even further into irrelevance.
grepfru_it · 4 years ago
I don’t understand the rationale here. You don’t want real tpm exposed to a vm because of security.. but you are okay with running unknown code (cracked software) to do who knows what to your runtime environment? o_O
mrlonglong · 4 years ago
I fear that might not be a good thing. Wouldn't it be better and safer to just emulate TPM in the VM?
gtvwill · 4 years ago
Errr they want real TPM functionality. Emulation kinda nerfs the whole point of it. It's a hardware key. If you could just emulate it what would stop you spoofing it?

Edit: autocorrect TPM

Wowfunhappy · 4 years ago
It sounds like VMWare agrees with you.

> Unlike VMware, which creates a virtual TPM, VirtualBox's new driver will require a host to have a TPM 2.0 processor for this feature to work.

freemint · 4 years ago
Because that would break TPM or mean adding another chain of trust to the OS verifying TPM which also has problems.
hilbert42 · 4 years ago
I'm ever so glad that my Windows machines are still running Win 7 with auto updates nuked.

That's the way it'll remain until the hardware fails. Of course, newer hardware runs Linux and replacements will also run Linux.

Microsoft Windows is now so out of kilter with users' actual realworld needs that I don't fully understand why people haven't migrated away from it droves.

greatgib · 4 years ago
Hopefully I don't use windows, but it is incredible that it does not piss off more people that you can't use an entire OS just because of a hw module required only for a small feature used by a minority of users. Mostly corporate.

But if you think long term, it makes sense for Microsoft:

They dream about having the same control as apple and Google have on their devices. The problem is that nothing prevent users to be the master of their machine and doing whatever they want with it. With the tpm module, they can start to restrict some things to you on your own computer, controlled by the tpm, and as an user you will have not way to do anything about it. Like copy your data to another computer.

rubyist5eva · 4 years ago
My life is no longer compatible with Windows.
errantmind · 4 years ago
Indeed. With the existence of Proton my last reason for keeping Windows around is gone. I'm about to switch my last computer to Linux.
rubyist5eva · 4 years ago
I’m actually considering just blowing away Windows on my gaming media center and just replacing it with Ubuntu. Most of my games work on proton anyway, anti cheat support is coming (thanks Stram Deck) and I’m just fed up with Microsoft’s constant built-in ads and notifications nagging, constant intrusive updates if I don’t use it for a while and even just the other day my video driver was corrupt and had to do a factory reset reinstall. Tired of the nonsense.
fuzzfactor · 4 years ago
If everything goes well, there will be finally be enough top engineers working on making Linux more fully substitute for Windows, than there have been Microsoft employees.

This is a very critical milestone.

teruakohatu · 4 years ago
Does TPM pass though mean that the virtualized OS knows the identity of the host hardware?
azalemeth · 4 years ago
Yes, and I can't help but think this will be used for more draconian DRM. I'm equally sure that soon people will have emulated TPMs that will act as a plug-in too.
cryptixvi · 4 years ago
I've used the below tool (W11 Boot and Upgrade FiX KiT v2.0) to resolve this on an old VMware host.

https://kutt.it/Bh0Mad

Password MDL2021

Simple to do, works fine for me. I built the original image using uudump.net

Im not the creator or author of either tool just a satisfied user.

captainmuon · 4 years ago
Is there a way around this restriction? Does the registry hack that floated around when the first beta came out still work?
rejectfinite · 4 years ago
I always preferred VMWare workstation anyway. The downside is its harder to install a small easy VM on work PCs.
marcodiego · 4 years ago
Virtualbox license is better.

Deleted Comment