Embedded TPM. More secure, in theory. Also more hassle if you want to migrate your encrypted data to another platform.

Thank you for the answers. I tried to search in the forum, but did not find any previous topics.

So, i will read about PTT, did not hear about it before. On my previous work computer I had classic TPM module, but that mobo was from other vendor 🙂

I need to encrypt the disk with bitlocker and want to use a virtual smart card. Bitlocker was mentioned that it works with TPP. Do you know, virtual smart cards are also working with the TPP?

Maybe somebody of you have experience and know it, so I do not need to spend so many time with it.

Thank you.

Don;t know about virtual smart cards but bitlocker disk encryption will work.

Windows BitLocker will work without hardware TPM. Technically less secure without the hardware token. But realistically, anybody with access to enough serious cryptobreaking resources to bust open BitLocker isn't going to be slowed down much by an extra authentication layer.

The real value of the TPM for most people would be that their encrypted data "can't" be decrypted on another platform, copied onto a pile of machines working in parallel to simultaneously brute force the cipher. The TPM hardware is a "black box" with active circuitry - a "key" to the crypto lock - which "can't" be duplicated and "can't" be moved to any other machine. If/when the hardware it's installed on ever breaks down then good luck migrating your encrypted data to another.