TPM-backed FDE: Take 2 minutes to help widen Ubuntu compatibility with your TPM configuration!

Project Discussion Desktop
, ,
1

As mentioned in the TPM-backed Full Disk Encryption reporting the huge progress made in Ubuntu 25.10 towards feature stability, we changed the TPM configuration compatibility detection to be more precise and protect our users even more than in our previous iterations.

One of the forseen consequence is that some systems which previously reported as compatible with TPM/FDE in ubuntu releases are not anymore with this new release. However, with some simple mitigations or by directing user actions, we can help them to ensure that the TPM system state is set in a more favorable conditions to become compatible with TPM-backed FDE Ubuntu integration.

And this is exactly where you can contribute very easily: even if you don’t intend to setup TPM/FDE right away on your system, you can install a snap and run a command line tool to report our detection results. We are collecting all those variations in a survey form to help us inform what to tackle next, and how many people are able to and can’t install TPM/FDE on their systems right now. This binary will not make any modifications on your current installation, so this is an easy and quick way to contribute and ensure that we have an even more awesome TPM-backed FDE release on Ubuntu 26.04 LTS!

We are interested in both positive and negative reports, you can fill in multiple hardware configurations you own.

So, don’t miss it! Head over to the survey form to get detailed instructions!

Thanks a lot for your participation!

6 Likes
2

I ran the test on my two Kubuntu 25.04 machines, both with AMD CPUs. Not supported in either case. I reported both results.

I was pondering re-installing to 25.10 to benefit from TPM2-backed FDE, but now I know it won’t work. I guess I’ll just upgrade to 25.10, it certainly will be less work for me.

Thanks for the efforts.

I already set up TPM2-backed FDE on both machines using clevis, but I’m forced to reset the TPM setup on every kernel update. I have a similar TPM-backed FDE problem on an USFF Lenovo ThinkCentre (8th gen Intel) I’m using as a home server with openSUSE MicroOS, so that’s not only Ubuntu.