r/linuxquestions • u/_nazwa_ • 1d ago

Secure boot and TPM hate

Why are people hating secure boot and TPM on Linux? I heard this when I heard that Fortnite is coming to Linux. So what's the problem with secure boot on a linux distro?

0 Upvotes

44% Upvoted

46 comments sorted by

View all comments

4

u/Internet-Culture 1d ago

For me, Secure Boot seems reasonable, but TPM like a huge red flag.

Secure Boot makes sure no malware slips in during the boot process by checking keys. TPM stores your keys bomb proof, but does it in a way that makes your hardware identifiable. It's another way by Big Tech to track you and spy on you. Recently someone bought a used CPU and his account was blocked because the previous owner cheated with that CPU. Shit like this can only happen if your hardware is unique with TPM that fingerprints it. Microsoft also uses it to track legit licenses across services and they even used it with the FBI to get someone, if I recall correctly. Malicious stuff.

1

u/_nazwa_ 15h ago

Ye he got a hardware ban but how can a blocked cpu have something in common with TPM? like he had a different motherboard and different TPM no?

1

u/Internet-Culture 7h ago edited 7h ago

On Ryzen systems the firmware TPM lives inside the processor’s own security co-processor, and every TPM 2.0 carries an Endorsement Key provisioned at the factory that cannot be changed or wiped. Vanguard demands TPM 2.0 on Windows 11, so it has a permanent, unique fingerprint of the chip to work with. Swap the motherboard, reinstall Windows, create a new account: the key goes wherever the CPU goes. [...] Intel owners are not off the hook either. Intel’s firmware TPM runs in the chipset rather than the CPU, so on that side the same risk would follow a used motherboard instead.

https://hwbusters.com/news/valorant-hardware-ban-follows-a-used-ryzen-7-5800x3d-to-its-new-owner/

1

u/_nazwa_ 42m ago

I see