you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 1 year ago (7 children)

It won't boot though, because the keys to decrypt the system are stored in the TPM.

Sure you could replace the whole OS, but that's going to be very obvious and won't allow you access to the data.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 9 points 1 year ago (5 children)

    If you have physical access you could go into the bios and turn off secure boot

  • source
  • parent
  • hideshow 5 child comments
  • [–] 5 points 1 year ago (2 children)

    If you enable Secure Boot you should also set a BIOS password for this very reason.

  • source
  • parent
  • hideshow 2 child comments