Forum Discussion

Coop0183's avatar
Coop0183
Copper Contributor
Nov 02, 2018

MSIX blocks TPM

Appears when you package an application that either writes to TPM or even more importantly READS from TPM MSIX is blocking access.   Any thoughts about adding support / pass through to access TPM ?...
Coop0183's avatar
Coop0183
Copper Contributor
Nov 03, 2018

Couple of Examples

 

1. If you were to package a browser with MSIX and your organization uses virtual smartcard, X.509 certificates, etc. that are stored in TPM for authenticating to Web Sites or SaaS applications ... the Browser which has been packaged as an MSIX cannot access the certificate stored in TPM ... making authentication with a certificate impossible.

 

2. If an organization asks a user to present strong credentials .. like a virtual smartcard, X.509 certificate, etc. that is stored in TPM to change their password ... the application fails when attempting to read the Certificate stored in TPM.

 

3. If you package an application which helps users to acquired a certificate that is stored in TPM  - Virtual Smartcard, X.509, etc. the application will FAIL when writing to TPM.

  • jvintzel's avatar
    jvintzel
    Former Employee
    Nov 05, 2018

    Its great feedback and we will look to add it to the backlog.  You can also add it to the public ideas section and we can update the progress, as well as other folks can chime in.

     

    John.

Resources