For the past two years Ubuntu developers have been talking about [1]adding TPM-based full disk encryption to the installer for those wanting to leverage their system's Trusted Platform Module 2.0 capabilities to enhance security. It looks like for Ubuntu 25.10 this October that support will finally be in good shape.

Canonical engineers have been working toward being able to optionally leverage the Trusted Platform Module (TPM) to enhance full disk encryption (FDE) security with their modern Ubuntu desktop installer. They are under pressure now to get it all wrapped up for Ubuntu 25.10 to allow this cycle for testing ahead of the very important Ubuntu 26.04 Long Term Support (LTS) release.

In a new Ubuntu Discourse post today, Canonical engineer Didier Roche outlined their latest TPM/FDE progress. Their graphical installer is getting all the bits squared away to make this enhanced security a reality. For the Ubuntu 25.10 release they intend for the TPM/FDE option to be considered experimental and not yet for production environments.

Those interested in making use of TPM-backed Full Disk Encryption with the upcoming Ubuntu 25.10 release can learn more via the [2]Ubuntu Discourse .



[1] https://www.phoronix.com/news/Ubuntu-23.10-TPM-FDE

[2] https://discourse.ubuntu.com/t/tpm-fde-progress-for-ubuntu-25-10/65146