diff --git a/sets/krb5.nix b/sets/krb5.nix
deleted file mode 100644
index 6e88501..0000000
--- a/sets/krb5.nix
+++ /dev/null
@@ -1,16 +0,0 @@
-{ ... }:
-
-{
-  krb5 = {
-    enable = true;
-    libdefaults.default_realm = "MANEHATTAN.ARTEM.IST";
-    domain_realm = {
-      "manehattan.artem.ist" = "MANEHATTAN.ARTEM.IST";
-      ".manehattan.artem.ist" = "MANEHATTAN.ARTEM.IST";
-    };
-    realms."MANEHATTAN.ARTEM.IST" = {
-      admin_server = "luna.manehattan.artem.ist";
-      kdc = "luna.manehattan.artem.ist";
-    };
-  };
-}
diff --git a/sets/tpm.nix b/sets/tpm.nix
new file mode 100644
index 0000000..18ea0a7
--- /dev/null
+++ b/sets/tpm.nix
@@ -0,0 +1,9 @@
+{ ... }: {
+  security.tpm2 = {
+    enable = true;
+    pkcs11.enable = true;
+    tctiEnvironment.enable = true;
+  };
+
+  users.users.artemis.extraGroups = [ "tss" ];
+}
diff --git a/system/rainbowdash/default.nix b/system/rainbowdash/default.nix
index 72343b7..ddfb088 100644
--- a/system/rainbowdash/default.nix
+++ b/system/rainbowdash/default.nix
@@ -7,9 +7,9 @@
     ../../sets/buildMachines.nix
     ../../sets/hacking.nix
     ../../sets/hardware.nix
-    ../../sets/krb5.nix
     ../../sets/laptop.nix
     ../../sets/secureBoot.nix
+    ../../sets/tpm.nix
     ../../sets/virtualization.nix
     ../../sets/workstation.nix
     inputs.nixos-hardware.nixosModules.common-cpu-intel
diff --git a/system/starlight/default.nix b/system/starlight/default.nix
index 512e100..d96c2ee 100644
--- a/system/starlight/default.nix
+++ b/system/starlight/default.nix
@@ -10,7 +10,6 @@
     ../../sets/fpga.nix
     ../../sets/hacking.nix
     ../../sets/hardware.nix
-    ../../sets/krb5.nix
     ../../sets/music.nix
     ../../sets/radio.nix
     ../../sets/secureBoot.nix