← Back to context

Comment by PunchyHamster

3 days ago

That is also required for any kind of key rotation to work, you're getting new key for a key, because alternative of using key directly would mean re-encrypting the whole drive when it changes and of course only having single one instead of multiple

So if you’re using the TPM based encryption you’d better have a working backup system.

How many home users have that? How many stories of personal data loss are we going to hear as windows 11 ready PCs start to die?