With all of the discussions of the Microsoft Windows Recall feature recently, I was reminded of Microsoft Pluton, an ongoing effort from Redmond to overhaul and replace TPM, and while also seemingly targeting Intel vPro.
“Microsoft is creating a new security chip that’s designed to protect future Windows PCs. Microsoft Pluton is a security processor that is built directly into future CPUs and will replace the existing Trusted Platform Module (TPM), a chip that’s currently used to secure hardware and cryptographic keys. Pluton is based on the same security technologies used to protect Xbox consoles, and Microsoft is working with Intel, AMD, and Qualcomm to combine it into future CPUs.
This new chip is designed to block new and emerging attack vectors that are being used to compromise PCs, including CPU security flaws like Spectre and Meltdown. Intel revealed back in 2018 that it was redesigning its processors to protect against future attacks, and Pluton is an even bigger step in securing CPUs and Windows PCs in general.”
"Microsoft Pluton security processor is a chip-to-cloud security technology built with Zero Trust principles at the core. Microsoft Pluton provides hardware-based root of trust, secure identity, secure attestation, and cryptographic services. Pluton technology is a combination of a secure subsystem, which is part of the System on Chip (SoC) and Microsoft authored software that runs on this integrated secure subsystem.”
"What is Microsoft Pluton?
Designed by Microsoft and built by silicon partners, Microsoft Pluton is a secure crypto-processor built into the CPU for security at the core to ensure code integrity and the latest protection with updates delivered by Microsoft through Windows Update. Pluton protects credentials, identities, personal data and encryption keys. Information is significantly harder to be removed even if an attacker installs malware or has complete physical possession of the PC.
Microsoft Pluton is designed to provide the functionality of the Trusted Platform Module (TPM) and deliver other security functionality beyond what is possible with the TPM 2.0 specification, and allows for other Pluton firmware and OS features to be delivered over time via Windows Update. For more information, see Microsoft Pluton as TPM.”
https://www.theverge.com/2020/11/17/21571069/microsoft-pluton-processor-security-windows-pc
https://learn.microsoft.com/en-us/windows/security/hardware-security/pluton/microsoft-pluton-security-processor
https://learn.microsoft.com/en-us/windows/security/hardware-security/pluton/pluton-as-tpm
#recall #pluton #microsoft #tpm #itsecurity