Pluton will be different than TPM as it will be part of the CPU itself, all three main vendors, Qualcomm, Intel and AMD are on-board with Pluton.Įach of the six areas shown above protects different parts of the boot process and the OS so let's look at them in detail. This new Secure Core Server platform lays the foundation for the forthcoming Pluton security processor, built on technologies first incorporated into Xbox One. There's been some interesting work in the security community over the last few years, demonstrating issues with the TPM platform, as they're a separate component on the motherboard and the traffic between it and the rest of the system can be manipulated. Windows Admin Center Secure Core Features (source: Microsoft). Here's a one-year-old Dell Hyper-V host with quite a few missing. To be able to audit this across a fleet of servers, there's a new extension for Windows Admin Center that lists which of the six requirements a server meets. To carry the label Secure Core Server the OEM must provide secure firmware and drivers and enable these features by default. On servers this will protect against boot kits and root kits, malware designed to compromise the system before it starts, thus bypassing any defenses running in the OS. Instead of enabling these (and other) security features after taking delivery, it's all turned on out of the box. This is a type of PC that you can buy from Microsoft, Lenovo, Dell, Panasonic, HP and others that has a Trusted Platform Module (TPM) 2.0 chip, Bitlocker turned on and Virtualization Based Security (VBS) to protect credentials while the system is running.
The big theme of Windows Server 2022 is security - primarily bringing the concept of Secure Core from Windows client to the server world with Secure Core Servers.
This blog post from August 2020 and this one from September 2020 are more sources for what's coming. If you have Software Assurance for your Windows Server licenses and you want to use the latest from the server team - there are actually two releases each year of Windows Server with new features, as long as you don't mind using Server Core only and upgrade at least every 18 months. We have two sources for what new features we can expect - the presentation at Ignite, as well as the Semi-Annual Channel (SAC) releases of Windows Server. This isn't to say that there aren't some interesting things coming that will probably make your life easier, but it sends a clear message - Windows Server isn't a priority at Microsoft like it was some years ago.
0 kommentar(er)
