Hacker News Reader

BitLocker is mostly worthless if you don't also password UEFI, disable booting off any other disk than the main one, and enable SecureBoot.

If you booted anything but the OS that set up BitLocker, wouldn't the TPM refuse to release the key?

That is correct.

read the article.