249
you are viewing a single comment's thread
view the rest of the comments
[-] pulsewidth@lemmy.world 9 points 4 hours ago

When Windows provisions a device against a Microsoft Account, a system service called wlidsvc talks to login.live.com and gets back what Microsoft calls a Device PUID, a Passport Unique ID, inside the server’s SOAP response. Server assigned. Windows never computes it locally from anything on your PC. It receives a string and stores it.

It likely uses the motherboard's burned-in TPM module API to generate the unique hardware ID on, and associate with the account/license.

Bruv... it literally says exactly on the statement you quoted that the ID is generated by Microsoft, and explicitly that its not generated on the device. Why would you then go on to speculate that its generated on device by the TPM...?

AFAIK the TPM doesn't generate anything, its role is for storing cryptographic information - not creating it.

[-] 4am@lemmy.zip 1 points 52 minutes ago

Motherboard TPM sends a cryptographically verifiable serial number ID to Microsoft -> Microsoft generates a Device PUID (this ensures all DPUIDs are in the same format) -> Microsoft send generated DPUID back to the device which is stored within the TPM and is cryptographically verifiable to applications which wish to access and know it, and ensure it is genuine and authentic.

TPMs all have a unique identifier burned into them.

[-] artwork@lemmy.world 0 points 2 hours ago* (last edited 2 hours ago)

Please do consider checking out how TPM may be used, and I've provided a reference for more context.

this post was submitted on 11 Jul 2026
249 points (100.0% liked)

Privacy

4784 readers
412 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 3 years ago
MODERATORS