Merge pull request #206390 from fcabrera23/eflow-dtpm-fixes

Fixes starting doc

Author: PRMerger20

articles/iot-edge/how-to-access-dtpm.md

@@ -14,29 +14,29 @@ services: iot-edge
 
 [!INCLUDE [iot-edge-version-all-supported](../../includes/iot-edge-version-all-supported.md)]
 
-Trusted platform module (TPM) technology is a technology designed to provide hardware-based, security-related functions. A TPM chip is a secure crypto-processor that is designed to carry out cryptographic operations. The Azure IoT Edge for Linux on Windows (EFLOW) virtual machine doesn't support vTPM. However, the user can enable or disable the TPM passthrough feature, that allows the EFLOW virtual machine to use the Windows host OS TPM. The TPM passthrough feature enables two main scenarios:
+A Trusted platform module (TPM) chip is a secure crypto-processor that is designed to carry out cryptographic operations. This technology is designed to provide hardware-based, security-related functions. The Azure IoT Edge for Linux on Windows (EFLOW) virtual machine doesn't have a virtual TPMs attached to the VM. However, the user can enable or disable the TPM passthrough feature, that allows the EFLOW virtual machine to use the Windows host OS TPM. The TPM passthrough feature enables two main scenarios:
 
 - Use TPM technology for IoT Edge device provisioning using Device Provision Service (DPS)
 - Read-only access to cryptographic keys stored inside the TPM. 
 
-This article describes how to develop a sample code in C# to read cryptographic keys stored inside the TPM. 
+This article describes how to develop a sample code in C# to read cryptographic keys stored inside the device TPM. 
 
 > [!IMPORTANT]
 > The access to the TPM keys is limited to read-only. If you want to write keys to the TPM, you need to do it from the Windows host OS. 
 
 ## Prerequisites
 
-- A Windows host OS with a TPM or vTPM
+- A Windows host OS with a TPM or vTPM (ig using Windows host OS virtual machine).
 - EFLOW virtual machine with TPM passthrough enabled. Using an elevated PowerShell session, use `Set-EflowVmFeature -feature "DpsTpm" -enable` to enable TPM passthrough. For more information, see [Set-EflowVmFeature to enable TPM passthrough](./reference-iot-edge-for-linux-on-windows-functions.md#set-eflowvmfeature).
 - Ensure that the NV index (default index=3001) is initialized with 8 bytes of data. The default AuthValue used by the sample is {1,2,3,4,5,6,7,8} which corresponds to the NV (Windows) Sample in the TSS.MSR libraries when writing to the TPM. All index initialization must take place on the Windows Host before reading from the EFLOW VM. For more information about TPM samples, see [TSS.MSR](https://github.com/microsoft/TSS.MSR).
 
+    > [!WARNING]
+    > Enabling TPM passthrough to the virtual machine may increase security risks.
+    
 ## Create the dTPM executable
 
 The following steps show you how to create a sample executable to access a TPM index from the EFLOW VM. For more information about EFLOW TPM passthrough, see [Azure IoT Edge for Linux on Windows Security](./iot-edge-for-linux-on-windows-security.md).
 
-> [!WARNING]
-> Enabling TPM passthrough to the virtual machine may increase security risks.
-
 1. Open Visual Studio 2019 or 2022.
 
 1. Select **Create a new project**.