TPM
also: Trusted Platform Module, TPM 2.0, TPM 1.2
TPM (Trusted Platform Module) is a dedicated microchip on a computer's motherboard that provides cryptographic functions and secure storage for sensitive data like encryption keys and passwords.
A TPM is a hardware security module designed to protect your system against low-level attacks and unauthorized access. It stores encryption keys, certificates, and other sensitive data in tamper-resistant storage that remains protected even if an attacker gains root access to the operating system.
Common uses include full-disk encryption (like BitLocker on Windows or LUKS on Linux), securing authentication credentials, and attestation—proving to remote systems that your hardware and software haven't been compromised. For example, Linux systems can use TPM to automatically unlock encrypted volumes during boot if the firmware hasn't been tampered with.
TPM 2.0 is the current standard, offering stronger cryptography than TPM 1.2. You can interact with Linux TPM tools like tpm2-tools to manage keys and perform cryptographic operations.