http://hn.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion/stories/33847869
For enterprise systems you can make sure that you have access to the EH, so you might use the EH (though if you ever want to send a system back to a vendor, or sell it, you might want to be able to change the chosen hierarchy's seed, but if you change the EH's seed, then you render the EK certificate useless, which would render that TPM useless to anyone else, but then, you might not ever resell your used equipment). Another reason is that changing the primary seed of the...