whats TPM? - Universal Blue

© 2026 Hedgehog Software, LLC

More

Communities Docs About Terms Privacy

terrestrialAdversary

T

terrestrialAdversary•7/2/24, 12:46 AM

thank you kyle :3

terrestrialAdversary

T

terrestrialAdversary•7/2/24, 12:46 AM

i'll come back if i get any problems

terrestrialAdversary

T

terrestrialAdversary•7/2/24, 12:46 AM

this makes me so happy

Len

LLen whats TPM?

Kyle Gospo

K

Kyle Gospo•7/2/24, 12:46 AM

It's a part of the CPU that can do secure computing

terrestrialAdversary

T

terrestrialAdversary•7/2/24, 12:47 AM

also do i need the firmware updates and decky loader on a normal pc, my ocd makes me want to click them, but it seems uneccesary

Valerie

VValerie I thought the Deck didn't have TPM, which feels stupid saying out loud.

VagrantWinds

V

VagrantWinds•7/2/24, 12:47 AM

it does

Valerie

V

Valerie•7/2/24, 12:48 AM

Yeah I get that now lol

terrestrialAdversary

TterrestrialAdversary also do i need the firmware updates and decky loader on a normal pc, my ocd make...

Valerie

V

Valerie•7/2/24, 12:48 AM

Decky is a nice to have, firmware afaik is just for Deck. You will still get firmware stuff for your PC (if it supports in-OS updating)

terrestrialAdversary

T

terrestrialAdversary•7/2/24, 12:48 AM

okay

terrestrialAdversary

T

terrestrialAdversary•7/2/24, 12:48 AM

thank you

Kyle Gospo

KKyle Gospo It's still encrypted at rest, it just means you're only secured by your password...

Len

L

LenOP•7/2/24, 12:48 AM

can that be trusted? like when the system doesnt boot without a password seems much better than being secured only by the lock screen

Len

L

LenOP•7/2/24, 12:49 AM

like can it be bypassed?

Len

LLen like can it be bypassed?

Kyle Gospo

K

Kyle Gospo•7/2/24, 12:49 AM

If the drive is removed it's a brick

Kyle Gospo

K

Kyle Gospo•7/2/24, 12:49 AM

If it's still in the device, your data is protected by the existence of the lock screen, it can only ever be as protected as that offers you

Valerie

V

Valerie•7/2/24, 12:50 AM

We had a similar conversation to this yesterday.

If your Steam Deck is stolen, the valuable part about it is the hardware not your netflix logins. Don't stress it TOO much.

Kamquat

K

Kamquat•7/2/24, 12:51 AM

Does anyone with a Legion Go and a USB-C to HDMI dock/dongle/etc of some sort have a few minutes to help me troubleshoot something?

Original message was deleted

M

M2•7/2/24, 12:52 AM

Warrant and you're f'ed on that front.

Kamquat

K

Kamquat•7/2/24, 12:53 AM

Is it

sudo ostree admin pin 0

sudo ostree admin pin 0

to pin my current deployment?

Valerie

V

Valerie•7/2/24, 12:54 AM

My word of advice was don't keep anything incriminating on a gaming device but that's 100% just me.

Wheeler

W

Wheeler•7/2/24, 12:54 AM

rpm-ostree to see which deployment you're in.

Wheeler

W

Wheeler•7/2/24, 12:54 AM

You may have a staged deployment that you would reboot into, and that deployment would be 0 and the one you're in would be 1.

Wheeler

W

Wheeler•7/2/24, 12:54 AM

They are listed from top to bottom 0, 1, 2 etc. And the one you're botted into is the one with the dot next to it.

Valerie

VValerie My word of advice was don't keep anything incriminating on a gaming device but t...

Valerie

V

Valerie•7/2/24, 12:54 AM

Buddy of mine ran a whole drug operation off of a steam deck, ended up being his downfall.

Kamquat

K

Kamquat•7/2/24, 12:54 AM

Deployments:
● ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable
                   Digest: sha256:b48da348e0f942a18e833fb14f5483d70b291b41f34089c390148ad53a36dec4
                  Version: 40.20240625.0 (2024-06-27T02:01:04Z)
          LayeredPackages: mullvad-vpn
                   Pinned: yes

  ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable
                   Digest: sha256:d23de6a06070e3b4de06353f4a8c1939817164fae55613a0b91c1045bec5f2b2
                  Version: 40.20240701.0 (2024-07-02T00:20:03Z)
          LayeredPackages: mullvad-vpn

Deployments:
● ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable
                   Digest: sha256:b48da348e0f942a18e833fb14f5483d70b291b41f34089c390148ad53a36dec4
                  Version: 40.20240625.0 (2024-06-27T02:01:04Z)
          LayeredPackages: mullvad-vpn
                   Pinned: yes

  ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable
                   Digest: sha256:d23de6a06070e3b4de06353f4a8c1939817164fae55613a0b91c1045bec5f2b2
                  Version: 40.20240701.0 (2024-07-02T00:20:03Z)
          LayeredPackages: mullvad-vpn

` Yeah I think it worked

Kamquat

K

Kamquat•7/2/24, 12:55 AM

oops wall of text sorry

Wheeler

W

Wheeler•7/2/24, 12:55 AM

In that instance, you're booted into 0. And you have it pinned already.

Valerie

VValerie Buddy of mine ran a whole drug operation off of a steam deck, ended up being his...

M

M2•7/2/24, 12:55 AM

That man was an idiot

MM2 That man was an idiot

Valerie

V

Valerie•7/2/24, 12:55 AM

He was gonna use an Ally but less back buttons was a deal breaker

Wheeler

WWheeler In that instance, you're booted into 0. And you have it pinned already.

Kamquat

K

Kamquat•7/2/24, 12:56 AM

Yeah that's what I want, Game Mode (I think it's GameScope) isn't working with external USB-C to HDMI displays on my Legion Go on the most recent build.

Valerie

VValerie He was gonna use an Ally but less back buttons was a deal breaker

M

M2•7/2/24, 12:56 AM

At least the ally has bitlocked

Kamquat

K

Kamquat•7/2/24, 12:56 AM

So I want to stay on this one till it works again

Kamquat

KKamquat Yeah that's what I want, Game Mode (I think it's GameScope) isn't working with e...

Wheeler

W

Wheeler•7/2/24, 12:56 AM

No better OS for being able to boot in between your trouble-shooting deployment instances!

MM2 At least the ally has bitlocked

Valerie

V

Valerie•7/2/24, 12:56 AM

I mean isn't TPM LUKS basically Bitlocker-equivalent

tryhardsoccermomswag

T

tryhardsoccermomswag•7/2/24, 12:57 AM

https://www.youtube.com/watch?v=0LdZVtQUBhY
turning my steam deck into a cell phone

YouTubeJSK

Making Steam Deck Completely Mobile with Cellular LTE

I connected TE's LEMBAS USB Modem to my Steam Deck to be able to freely play on-the-go without any limitations! Check out the instructions on my Instructables https://www.instructables.com/Making-Steam-Deck-Completely-Mobile-With-Cellular-/

Check out more of my projects on Amikers (https://www.amikers.com)!
-------------------------------------...

Valerie

VValerie I mean isn't TPM LUKS *basically* Bitlocker-equivalent

M

M2•7/2/24, 12:57 AM

But steam deck doesn't have secureboot setup for a good path for tpm

tryhardsoccermomswag

Ttryhardsoccermomswag https://www.youtube.com/watch?v=0LdZVtQUBhY turning my steam deck into a cell ph...

Valerie

V

Valerie•7/2/24, 12:58 AM

Oh you found his channel!

Yeah he also used them as burners, snapped them over his knee to hang up. Three lithium fires.

MM2 At least the ally has bitlocked

Kamquat

K

Kamquat•7/2/24, 12:58 AM

As a former Ally owner, let me just say, fuck bitlocker. It pitched a fit when I disabled secure boot prior to installing Bazzite. I couldn't install Linux til I re-installed, and un-bitlocker locked the ssd via Microsoft's site. THEN I was blessed to be able to actually wipe the drive and install.

M

M2•7/2/24, 12:58 AM

Wow

M

M2•7/2/24, 12:59 AM

Probably would of been easier to just destroy the partition table

Kamquat

K

Kamquat•7/2/24, 12:59 AM

Yeah, turns out that if you disable secure boot and don't IMMEDIATELY boot into the Linux install, and Windows tries to boot, that sets bitlocker off.

MM2 Probably would of been easier to just destroy the partition table

Kamquat

K

Kamquat•7/2/24, 12:59 AM

Tried, couldn't with the Bazzite installer

Valerie

V

Valerie•7/2/24, 1:00 AM

gparted live iso my lover

Kamquat

K

Kamquat•7/2/24, 1:00 AM

Maybe I could have with something else that let me directly use gparted

Valerie

VValerie gparted live iso my lover

Kamquat

K

Kamquat•7/2/24, 1:00 AM

yeah, but I was on the road so only HAD 1 usb, and THAT had bazzite on it, so writing another iso...

Kamquat

K

Kamquat•7/2/24, 1:00 AM

it was a collection of annoying circumstances and issues

Valerie

V

Valerie•7/2/24, 1:00 AM

I mean Bazzite supports being Ventoy'd now which is good.

Kamquat

K

Kamquat•7/2/24, 1:01 AM

I wound up returning the ally and buying a Legion Go anyways

Len

L

LenOP•7/2/24, 1:02 AM

i guess i just fixed my laptop sleeping issue

Kamquat

K

Kamquat•7/2/24, 1:02 AM

One thing Asus has over Lenovo is their Cloud Restore in the BIOS. Lenovo's USB maker was utter crap and never worked, so I wiped my go with no restore media

Len

LLen i guess i just fixed my laptop sleeping issue

tryhardsoccermomswag

T

tryhardsoccermomswag•7/2/24, 1:02 AM

blaze it

Deployments:
● ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable
                   Digest: sha256:b48da348e0f942a18e833fb14f5483d70b291b41f34089c390148ad53a36dec4
                  Version: 40.20240625.0 (2024-06-27T02:01:04Z)
          LayeredPackages: mullvad-vpn
                   Pinned: yes

  ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable
                   Digest: sha256:d23de6a06070e3b4de06353f4a8c1939817164fae55613a0b91c1045bec5f2b2
                  Version: 40.20240701.0 (2024-07-02T00:20:03Z)
          LayeredPackages: mullvad-vpn

Deployments:
● ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable
                   Digest: sha256:b48da348e0f942a18e833fb14f5483d70b291b41f34089c390148ad53a36dec4
                  Version: 40.20240625.0 (2024-06-27T02:01:04Z)
          LayeredPackages: mullvad-vpn
                   Pinned: yes

  ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-deck:stable
                   Digest: sha256:d23de6a06070e3b4de06353f4a8c1939817164fae55613a0b91c1045bec5f2b2
                  Version: 40.20240701.0 (2024-07-02T00:20:03Z)
          LayeredPackages: mullvad-vpn