Try   HackMD

TPM on Windows11

Hyper-V

使用Windows原生的hyper-v虛擬平台，可以建立具有TPM module、支援secure boot的虛擬機，並且也可以安裝windows11。

安裝步驟

Prerequisites

首先我們需要啟用hyper-v的功能，進入控制台->程式集->開啟或關閉windows功能->勾選Hyper-V選項。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

接著我們可以到臺大計算機中心下載學校提供的WIN11 ISO檔，為等一下的虛擬機器安裝做準備(請注意要在臺大的網域下。)。
https://download.cc.ntu.edu.tw/download.php
以及認證用的KMS腳本。
https://oper.cc.ntu.edu.tw/KMS/

建立虛擬機

1、在Hyper-V管理員裡，選擇自己的電腦->新增->虛擬機器。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

2、指定其名稱。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

3、要使用TPM的功能，我們必須選擇第二世代。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

4、接下來就是分配記憶體、指定網路模式、分配硬碟。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

網路選擇bridge可以讓虛擬機與Host在同一層網段下。
Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

值得注意的是，要安裝windows11前提下硬碟最好給到70GB以上。

5、選擇稍早下載的windows11鏡像檔案。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

6、完成後，在新創立的虛擬機上點右鍵->設定，即可進入設定頁面。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

在安全性頁面，勾選啟用信賴平台模組。

7、點擊進入虛擬機，點按啟動。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

8、在此畫面出現時點按Enter(不快點按他會改從網路開機，就要重開機)。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

9、接下就正常進行安裝windows11的流程。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

10、登入進去後，使用管理員權限打開powershell。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

11、輸入：

$ Get-Tpm

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More → 

$ Get-TpmEndorsementKeyInfo -Hash "Sha256"

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

可以看到模擬出的EK key，但好像沒有放cert。

功能測試

Last changed by 
 
Nemo
0
600

Read more

No More Chewy Centers: Introducing The Zero Trust Model Of Information Security

消除以往外部網路與內部網路的區別。也就是説，所有的流量都是untrust。內部資安人員應該對所有流量進行檢查與log並實行access control。 攻擊型態的轉變 2010年時一架飛機上載著10名看似正常不過且彼此互不認識的民眾——其中有人甚至幫微軟測試過軟體——從紐約飛往維也納，但他們的真實身份其實為俄羅斯間諜，且已保持著非常普通的狀態數年之久。他們努力的與美國具影響力的人物混熟，並向俄羅斯秘密發送獲取到的訊息。 從這個例子來說，現代的攻擊型態、週期已經拉長，駭客的攻擊手法已經變為"low and slow"，也就是花漫長的時間搜集許多我們並不會特別留意的網路資料，整個時間會拉長到數月或著數年不等。且不同於以往的大範圍找尋可下手的目標，現代駭客的攻擊範圍只會越來越窄、越來越具針對性，特別是那些具有高價值的系統或資訊。 The Philip Cummings Problem Philip Cummings在一家為數個徵信所提供軟體的公司上班，其中與奈及利亞的犯罪集團合作，將客戶的信用資料轉給該集團。

Oct 1, 2022
TPM survey

Group Policy setting Windows10、Windows11中可以使用Group Policy Setting來設定Windows系統對於TPM的使用方式。 我們可以按下windows鍵+R，並輸入：gpedit.msc，即可打開Group Policy Setting。 接著轉至：系統管理範本->系統->可信賴平台模組服務，便可設定windows系統對於TPM的原則。 The Level of TPM owner authorization information available to the operating system 此設定可以調整Windows會使用TPM來進行哪些特定行為。越高的層級，允許使用TPM的行為就越多。例如：

Aug 11, 2022
111-2專題研究筆記 Week 15-16

Task Specification In this note, I was trying to figure out several questions, including: Is my laptop (macbook air 2020) support TPM? And if so is it TPM 2.0? what functions can be done with my computer's TPM module? What are the algorithms it uses? Where does it store the key? What should be done when user forget the key? Can TPM increase the performance of "data in motion"?

Jul 27, 2022
Performance Measurement Of SSL/TLS Using Trusted Platform Module

About The Speed of Cipher Algorithms Situation Specification We already know that we can use this github project's engine to change the role of performing the encryption and decryption algorithms for SSL/TLS communication from the CPU to the TPM. Now we want to go a step further and measure the performance change after changing it to TPM. Task Specification The openssl project provides a useful function to measure the performance of each algorithms it can use, that is openssl speed. I planed to use openssl speed to test the performance difference between CPU and TPM in performing these encryption and decryption algorithms. We can simply type: openssl speed [algorithms]

Jul 27, 2022
Read more from Nemo
Published on HackMD