Analysis of Pin and TPM for Microsoft Laptops

1. Implement Pin2 + TPM on laptops. Under this alternative, a user will be prompted for a Pin before the computer boots. Once the user authenticates, they will be prompted for the OS password to gain access to the computer. This authentication scheme is very strong, but is slightly disruptive because users may need two credentials instead of one to access their device. 2. Implement TPM only on laptops. Under this alternative, the user is prompted only for the OS password. The information on the device is still fully encrypted, but the device becomes vulnerable to a small set of attacks. For example, if an attacker can exploit a vulnerability in a service that boots before the OS password prompt, a skilled attacker could possibly gain access to the data on the device.