Security boost in Windows 11 limits PC reuse

Microsoft has put a lot of emphasis on improving security in Windows 11, but this comes at a cost as old hardware is no longer supported

Cliff Saran

By

Published: 29 Sep 2021 14:39

Data from Lansweeper has found that almost a fifth of PCs will be unable to run Microsoft’s newest operating system (OS), Windows 11.

Although it can be manually installed on any PC, Windows 11 is only certified to run on equipment with processors less than four years old. An automatic upgrade to the new operating system is only possible if the PC is running a supported processor and has the minimum 4GB of required memory.

Specifically, to run Windows 11, PCs need a trusted platform module (TPM version 2.0), which Microsoft describes as a secure crypto-processor designed to carry out cryptographic operations. It said the TPM includes multiple physical security mechanisms to make it tamper-resistant.

Malicious software is unable to tamper with the security functions of the TPM, Microsoft noted in the Windows 11 specifications webpage. The TPM is used to store cryptographic keys and helps to maintain the integrity of the system. Newer hardware tends to have the TPM built-in, such as Intel Platform Trust or AMD Platform Security Processor. 

However, analysis from Lansweeper, based on an estimated 30 million Windows devices from 60,000 organisations, found that many PCs lack TPM capabilities. It reported that, on average, only 44.4% of the workstations were eligible to receive the automatic upgrade.

Lansweeper’s analysis found that while the majority of PCs (91%) had sufficient RAM, only about half of the workstations met the TPM requirements. Of the PCs it analysed, almost a fifth (over 19%) failed and 28% were not TPM-compatible or did not have the crypto-processor functionality enabled.

For PCs with a TPM 2.0 module, the function can be enabled in the Bios menu. For older devices, some PC motherboard models offer an add-in TPM 2.0 card which can be purchased. But some organisations may need to scrap their old PC hardware altogether if they want to install Windows 11.

Organisations using virtual desktop infrastructure (VDI) also face challenges in updating virtual machines (VMs) to Windows 11. When Lansweeper analysed virtual machines, it found that CPU compatibility was slightly higher, at 44.9%, but only 66.4% of the VMs had enough RAM. It’s analysis also found that very few Windows VMs (0.23%) had TPM 2.0 enabled.

While TPM passthrough (vTPM) exists to give virtual machines a TPM, Lansweeper said this feature was rarely used. It warned that Windows VMs would need to be reconfigured with a vTPM before they could upgrade to Windows 11.

It also found that TPMs on physical servers only passed the test 1.49% of the time. This, according to Lansweeper, means about 98% would fail to upgrade if Microsoft were to create a server operating system with similar requirements in the future. Its analysis found hardly any virtual servers with TPM enabled.

Discussing the data, Roel Decneut, chief marketing officer at Lansweeper, said: “Microsoft justifies the need for these requirements to allay security fears, as many devices won’t be able to upgrade, even some that are fresh on the market.”

Decneut said the improved security might drive organisations that are early adopters of new technology to upgrade their PC estate, but in enterprises with thousands of Windows machines the upgrade would be a massive task, requiring a full inventory of the PC estate.

Read more on IT operations management and IT support

Note: This article have been indexed to our site. We do not claim ownership or copyright of any of the content above. To see the article at original source Click Here

Related Posts
Qualcomm will build satellite service into Android phones this year thumbnail

Qualcomm will build satellite service into Android phones this year

Image: Qualcomm Qualcomm has announced Snapdragon Satellite, which will connect select Snapdragon-powered premium smartphones to the Iridium satellite network for emergency texting in the second half of 2023. What this means is that Android smartphones will be able to duplicate and expand upon Emergency SOS, Apple’s satellite service that allows iPhone 14 models to text
Read More
Wuling launches new convertible mini EV for less than $15,000 thumbnail

Wuling launches new convertible mini EV for less than $15,000

General Motors’ minicar joint venture in China, SAIC-GM-Wuling (SGMW), launched a new entry-level convertible EV, called Mini EV Cabrio, on September 25, priced at RMB 99,900 ($13,936.75). Mini EV Cabrio is equipped with a 30 kW motor with a peak speed of 100 km/h, with a driving range of 280 km (174 miles). The fully
Read More
No, Mark Zuckerberg isn't having a 'PR moment' thumbnail

No, Mark Zuckerberg isn’t having a ‘PR moment’

Axios, a site known for political analysis and extensive use of bullet points, has joined the ranks of pundits fawning over Mark Zuckerberg’s PR strategy. The Meta CEO, they claim, is (as originally headlined) "having a PR moment" which is "casting a halo effect on the company itself." That's obviously untrue, but let's say it
Read More
Galaxy S22 aluminum alloy machine model, almost unchanged design thumbnail

Galaxy S22 aluminum alloy machine model, almost unchanged design

近日,不少媒體指出 Samsung Galaxy S22 系列的發佈時間將定於明年的第一季度,這也使得人們的目光再次投向了 Galaxy 機型上。而現在外媒 coverpigtou.it 攜手知名爆料人士 @xleaks7 在網上展示了 Samsung Galaxy S22 手機的鋁製金屬模型,圖片十分清晰。這款手機的外觀設計與上一代非常相似,手機寬度較窄,整體比較小巧。從機模正面看,Galaxy S22 採用了四邊等寬的直屏設計,但是屏幕與邊框的間距並沒有傳言中的那樣窄。而在屏幕中間可以看到一個用於放置前置鏡頭的打孔。而手機側面依舊採用了圓潤的邊框,電源及音量按鍵位於右側,底部為 USB Type-C 和揚聲器格柵。該機模的背面可以看出,新機的後置鏡頭模組略微凸起於機身,輪廓與機身邊框合一。據了解 S22 可能會有三個鏡頭,並在相機凸點外有閃光燈,與 Galaxy S21 的設計非常相似。而目前在售的 Galaxy S21 5G 手機尺寸為 151.7×71.2×7.9mm,重169g。但 Galaxy S22 將有可能會比這更小,機身大小與 iPhone 13 相似。並且從目前曝光的新手機電池中可以看出其容量也將減少,容量為 3700mAh,比 S21 少了300mAh。
Read More
Index Of News