Advancing Endpoint Protection Against Physical Attacks: The Innovation Behind HP TPM Guard

This HP whitepaper outlines how physical attacks against TPMs — including bus sniffing, TPM relocation (move) and interposition — can enable attackers to extract full disk encryption keys and bypass solutions like BitLocker on lost or stolen laptops. It highlights that such attacks have become cheaper and easier, increasing risk to enterprises, and introduces HP TPM Guard, a hardware feature that encrypts and authenticates CPU–TPM communications and binds TPMs to specific CPUs to mitigate these classes of attacks.