I am looking into Bitlocker for my headless Microserver N54l with windows server 2016 on it. I saw that the n54l has no TPM module, but I can buy one and plug it to the board. I am interested in it solely for the purpose of using auto unlock.
In the TPM specs (Infineon) it clearly states that the TPM chip has to be physically fixed to the mainboard.
Doesn't it renders it's security features useless if it is on a seperate module which is plugged into the board ?
I am under the impression that with a tpm (and autounlock) one can only gain access if he has the windows account credentials or the encryption key ?
However i think that might not be true.
Btw I am not using a microsoft account on the server so my keys should not be uploaded to microsoft as far as I can tell.
What do you think ?