Dual boot + luks with tpm-pin + secure boot

Hi!

I’m new to CachyOS.
Well, even not new yet : my old laptop died and the new one arrive next week, so I’m preparing for installation.
I was formerly using manjaro but I’m existed to try CachyOS instead :smile:

So new laptop will come with windows, I plan to keep it in a small partition. Sometime it can help for stuff that definitely won’t work on linux.

It should be ok to make dual boot (I know how to do)

Then I plan to use full disk encryption with LUKS. I’m thinking I could use tpm automatic unlock with additional pin code (got to read a bit more on this but seems feasible).

While reading on tpm, I found that CachyOS wiki explain how to enable secure boot. So, why not?

Topic one by one seems ok, but I was wondering if all together can be all fine or am I running straight into trouble? :blush:

Oh and I assume I can start simple with secureboot disabled and luks with password (not using tpm) and play around with tpm later?