Microsoft Says Windows 10 Devices Can Be Made Secure: Here’s How

If you have an up-to-date device running Windows 10, Microsoft has enabled new standards that it said can ensure "a highly secure experience." The new security standards apply to PCs, laptops, tablets, 2-in-1 devices, and mobile workstations running processors certified for the Windows 10 Fall Creators Update that began rolling out last month.

Those processors include Intel's 7th-generation i3, i5, i7, and i9 chips and 7th-generation AMD silicon, along with the Intel Core M3 and Xeon E3 processors and Intel's latest Atom, Celeron, and Pentium chips.

Microsoft has described its latest version of Windows 10 as its most secure operating system to date, with a number of new built-in features to protect against malware and other threats such as ransomware. The update includes several new security enhancements specifically for enterprise users, among them a suite of Windows Analytics services for business applications and devices.

Enabling Security Compliance

The new Windows 10 security standards also specify requirements for process architecture, virtualization, Trusted Platform Module, platform boot verification, RAM, and various firmware elements. For example, up-to-date security is enabled on devices with processors that support 64-bit instructions, and with at least 8 gigabytes of RAM.

That means even recent devices, such as Microsoft's Surface Pro 4, don't support the company's latest security standards. However, in an article earlier this week, BleepingComputer.com's Lawrence Abrams noted that buyers might not have to spend too much for compliant devices, adding that the $499 Asus ASUS P-Series P2540UA-AB51 appears to meet all the requirements.

"Unfortunately, many consumer based computers would not be 100% compliant with the . . . requirements, simply because many do not include a TPM module," Abrams said. That leaves two other alternatives: buy a device with an AMD Ryzen processor, "which includes a firmware based TPM implementation called fTPM," or buy an Intel-based system...

Comments are closed.