

TPMs will certainly help with certain attacks, but Microsoft is banking on a combination of modern CPUs, Secure Boot, and its set of virtualization protections to really make a dent in ransomware. Ransomware attacks hit the headlines weekly, and ransomware funds more ransomware so it’s a difficult problem to solve. That 83 percent figure seems huge, but when you consider the various phishing, ransomware, supply chain, and IoT vulnerabilities that exist, the broad range of attacks becomes a lot clearer. “Our own Security Signals report found that 83 percent of businesses experienced a firmware attack, and only 29 percent are allocating resources to protect this critical layer,” says Weston. Microsoft has been warning for months that firmware attacks are on the rise. A dedicated TPM chip you probably don’t actually need for Windows 11. Microsoft wants to bring that same level of protection to everyone using Windows, even if it’s not always perfect. TPM 1.2 chips have existed since 2011, but they’ve typically only been used widely in IT-managed business laptops and desktops. It can be used to encrypt disks using Windows features like BitLocker, or to prevent dictionary attacks against passwords. TPMs work by offering hardware-level protection instead of software only.

Windows 11 is free, but your CPU might not be officially supported
