TPM and Luks Encryption key

[Circuit_Queen1997]

I am looking for someone that can help me with advanced information about the trusted platform module with the Librem 15 laptop. I have searched online for years and never can get a straight forward answer because the situation is very specific and unique. I read the article on this site about the TPM and I do know it is very important that is the whole reason I bought a Librem in the first place, but in the past I’ve had to disable the TPM and deactivate it in order to remove ownership of the computer but now it is in a different state and I’m not sure how for if I should attempt to make changes and I don’t want to take the risk in making a poor decision. When I first got the computer the keys that came with the computer were not set up correctly and there was no instructions a very short time later it stopped receiving updates and after other massive problems with VM and Gnome boxes I ended up factory setting the computer and I left it alone for a few years. Now almost 5 years later I am discovering that my suspicions were right and that issues I’ve had since have come from deployments with this specific computer and although the TPM appears to look like it is secure, no ownership by anyone yet, I have had issues with keys being stolen and also keys that should have not been created possibly could be sitting somewhere in the TPm. Also some confusion about whether the encrypted partition could still be somewhere deep inside the computer and if so, will it keep persistent data and corrupt other partitions with recovery and reinstalling. My main question is, if TPM is on and no ownership has been taken, is the only smart decision to set it to prevent ownership being taken or do I need to disable it in order to try and attempt to extract data from the partition and eventually wipe it and restart a new install. If anyone has any valuable information I would be grateful. Thanks! Also I included a picture because I don’t remember ever seeing an intel driver with this Librem before and I need correct information on what this Librem was supposed to come with and if the intel driver is one of the problems.

 

[APTI]

simple thing. do you actually need encryption? are you working on government secrets? encryption will not help you avoid being hacked. It is only going to help you if your physical equipment is stolen. And if you have problems with hardware the encryption will most likely cause you to lose everything or at the very least increase your time and cost of repair by a factor of 5

 

[Circuit_Queen1997]

I don’t have anything on the computer other than forensic data. Yes I do need encryption because I’m am a studying forensic analyst and I not only study malware but am a victim of a very advanced attack and am collecting evidence for litigation and law enforcement agencies. Do I need encryption? Yes. This specific attack is something I’ve dealt with for years now, so just needed to know if it was used for malicious purposes which it absolutely was, do I need to deactivate the platform keys before I do forensic work and perform a reinstall. I spent a lot of money on this laptop, and never got to really use it, and when I do, I want to make sure no boot kits are installed and no kernel issues arise. I just spent almost a decade removing a worm a remote Trojan and I don’t want anyone connected to any future computer again. Every computer I’ve ever had were destroyed on day one, this is one computer I know that if it’s set up correctly will work correctly and has the hardware that can handle performance. I am someone that once I fix this computer I don’t want it to boot unless it boots correctly.