1
For example, does it seal PCR1 into the password? What about PCRs 2 and 3?
1
For example, does it seal PCR1 into the password? What about PCRs 2 and 3?
1
Which PCRs are sealed into the key (meaning used for encryption) depends on the key itself.
For BitLocker, Windows decides which PCRs are to be used according to the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE\OSPlatformValidation_UEFI.
The default PCRs used by BitLocker in the BIOS are 0, 2, 4, 8, 9, 10, 11:
For more information see: