TPM2
also: Trusted Platform Module 2.0, TPM 2.0
TPM2 (Trusted Platform Module 2.0) is a cryptographic coprocessor chip that securely stores encryption keys, passwords, and certificates to enable hardware-based security features like secure boot and full-disk encryption.
TPM2 is the second generation of the Trusted Platform Module specification, a dedicated security chip found on modern motherboards and laptops. It provides a secure, isolated environment for cryptographic operations and sensitive data storage that cannot be accessed by the main CPU or operating system directly.
TPM2 enables critical security features: Secure Boot verification, BitLocker or LUKS full-disk encryption, and attestation that your system hasn't been compromised. For example, Linux distributions use TPM2 to unseal LUKS encryption keys automatically during boot when system integrity checks pass, preventing access if firmware or bootloader is modified.
On Linux, TPM2 is managed through tools like tpm2-tools and accessed via /dev/tpm0. You can verify TPM2 presence with cat /proc/cmdline | grep tpm or check dmesg | grep -i tpm. Modern systemd-based distributions increasingly require or recommend TPM2 for enhanced security.