Windows 10: Why does Windows 11 requirements mandates the availability of TPM ?

AFAIK many consumer-end products or say laptops designed for personal and non-commercial use, don't have TPMs..and its not for only my device or few others, but many.My laptop was marked as "not compatible" for windows 11 by PC health app and by insider build section of windows updates even though my laptop's hardware specifications are more than enough for windows 11.On finding what went wrong i di

:)

 

Windows 10 devices now requires hardware encryption/TPM

Stolen from Sweclockers, but it's in swedish.

So from now on devices (OEM built) needs a TPM module. Relevant bit:

Pretty interesting, but there's tons of questions I guess. I don't actually now anything about how TPM works, just that it's hardware, meaning the key is stored in a physical chip and that the decryption has to run through this chip. But I have no idea how let's say biometrics is tied to this. Or what the implications will be, or what exactly is encrypted. The entire storage or just the log in details as such?

 

Windows 10 devices now requires hardware encryption/TPM

I think pushing TPM requirements is a good thing, this should've been done years ago...why folks wouldn't want to use it is beyond me. For many industries where encryption is required, TPM has been required for years...and supporting 2.0+ standards is the obvious way to go.

We deploy A LOT of devices in the medical industry where TPM and active encryption are required, honestly @Solaris17 has TPM pretty well covered. It really is a good thing to be supportive of when deploying encrypted devices on a professional level and a personal level, how important is your data?

For those that might need a little more understanding for what TPM can provide, take a quick read:

How to Use the TPM: A Guide to Hardware-Based Endpoint Security | Trusted Computing Group

Windows Trusted Platform Module Management Step-by-Step Guide

http://www.howtogeek.com/237232/what-is-a-tpm-and-why-does-windows-need-one-for-disk-encryption/

Not saying software-only solutions are better or worse, but in my experience, TPM works very well, if its there, and you know how to use it right, then why not use it? Some situations where TPM is not available or supported by the provided encryption solution means sure don't use it, and requires another solution like a USB key...something you need not lose. Make your footprint small and make yourself seem like you're not worth the effort of breaking the encryption to access your data. This topic could really expand out into great depth in a hurry...

 

BitLocker TPM Group Policy difference between Allow and Require

Hello,

could somebody please explain the differences between "Allow" and "Require" for
EACH of these BitLocker Group Policy options:

1. Configure TPM startup: "Allow TPM" vs "Require TPM"
2. Configure TPM startup PIN: "Allow startup PIN with TPM" vs "Require startup PIN with TPM"
3. Configure TPM startup key: "Allow startup key with TPM" vs "Require startup key with TPM"
4. Configure TPM startup key and PIN: "Allow startup key and PIN with TPM" vs "Require startup key and PIN with TPM"

Help is very appreciated!