Windows 10: Standards for a highly secure Windows 10 device

Source: Standards for a highly secure Windows 10 device | Microsoft Docs

 

This is akin the The Motor Vehicle Department of any State telling a person applying for a drivers license must purchase a Ferrari *chuckle*Smile

:)

 

Request - WiFi Connectivity via PC Suite

I highly doubt that this would happen, as it was disabled on windows mobile devices after they found out it possed security risks and i think the same would apply here

 

Windows 10 for Lumia Device is not secure !??

Hi guyz, I have a question, I have heard many rumors since I got the update for Lumia 535 of Windows 10, some says that upgrading to Windows 10 would let my Lumia perform slow and also will have the risk of pics in my phone or SD-card due to some technical
issues through the company.... is it true ?.... plzz reply

Maharashtra, INDIA.

 

I wonder how many PCs you can buy now meet these standards.

 

What's with that insane RAM requirement? How is that supposed to make your system secure?
Is this the Twilight Zone or what? XD

 

The virtualization technology(the main security portion) runs in RAM*Wink
8 gigs, is not that much either.
I upgraded the laptop I bought in 2011, to 8GB(added a 4GB SO-DIMM) about 1 week after I bought it.

 

Yeah, I'm not sure about the "insane RAM requirements" comment as 8gig is simply today's minimum. Heck when I bought my new laptop, I was looking past 8gig and instead got 16. Both my main and backup desktop systems run 32.

Anyway I've been arguing for a while now that Windows 10 should be run on more than 4gig of memory. Glad to have this article to further advance that idea.

BTW I just need to install my TPM 2.0 module to complete the "Secure Windows" thing. Unfortunately my TPM module is an Infineon module which were flagged as having security issues - RSA Keys Generated by Infineon TPMs are Insecure - Windows 10 Forums

 

Ok... so I gotta understand, from what you say that, the 8 gigs are needed because of the virtualization technologies, and that directly means running VM's so you don't risk your main system?
If that's the case, now it makes complete sense to me. Still I feel the average Joe (as you say sometimes, peeps) will ever need past 6 Gigs of RAM as they know very little about virtualization and Virtual Machines...

Returning to the RAM, It doesn't affect me, I mean, I have 16 Gigs in my laptop, so running a 2 Gig RAM Windows 7 or 8.1 in a VM is meaningless... still I had to rely in a bios mods forum to learn to use a tool for Insyde Bios and enable AMD-V to make it a better experience. Why Acer disabled this in my new laptop model, while my old Aspire 4535 has it by default, is a mistery to me. And that reminds me there are laptop (or OEM desktop systems) that come with this technology disabled through the Bios, which is pure nonsense, is Microsoft aware of this unusual issue?

Thanks for the answers anyway, I didn't think about those specifics XD

 

Hi,
Secure boot must be enabled :/
That alone is interesting to me seeing that alone might be another nail in win-7's coffin maybe maybe not :/

 

Um, no the user/owner can always go into BIOS and change it. Actually bring enabled has been that way from the beginning I believe,

 

Secure boot is not an automatic enabled process. At least not on store bought desktop motherboards. While most of today's laptops running Windows 10 (or 8/8.1) have it enabled in the UEFI BIOS by the laptop vendor (a security feature MS now requires of laptops?) and my Lenovo has it enabled, it's not something you may see automatically enabled on a store bought motherboard. I know none of my Gigabyte boards (Z87, Z170, Z270) had it enabled by default in the UEFI BIOS. You can check this by typing "confirm-SecureBootUEFI" (without quotes) in PowerShell (Admin). You'll either get True or False...





There also some other parameters that needs to be met. And also that your GPU be UEFI BIOS compatible. This requires CSM to be disabled before secure boot can be enabled. Been there, did that - Fiji Bios Editing ( Fury / Fury X / Nano / Radeon Pro Duo ) - Page 90.

Here's some good instructions on enabling Secure Boot, and how to check with PowerShell - Enabling UEFI Secure Boot with a Gigabyte BIOS Trackballer. They should work with any board, not just Gigabyte.

 

Hi,
Actually secure boot is activated in both my boards in bios by default
Csm is also which sort of cancel secure boot and enables legacy installs

To disable secure boot one has to clear secure boot keys in bios and secure boot is disabled.

Now what I'm gathering from the article is win-10 wants the ability to enable secure boot in bios if it's disabled
I could be wrong and I hope I am because that would be a bummer if that is the case.
Pretty much why I said this could be an alternate way for MS to put another nail in win-7's coffin

If 10 has the ability to enable secure boot it would also have the ability to disable CSM plus a boat load of other bios stuff.

 

I think you may be misunderstanding some things. Anyway....

But what does PowerShell say??? *Wink

And which boards cause I kind of doubt that unless you set them up. Or you're talking about a laptop.

My reply in red as well *Smile

 

Hi,
Well I came to that thought for a couple reasons
1) MS has added power option functions to set a processors maximum MHz how else would 10 be able to do that if not adjusting the MHz inside the bios settings ?
Before it was just performance/ Balanced .. power plans

2) There are numerous utilities asus extreme tuning/.... that indeed adjust bios settings so why is it untrue MS wouldn't want the same abilities ?