Windows 8.1 Certification to Require Trusted Platform Module (TPM) Starting in 2015

Official PDF: http://download.microsoft.com/downl...dows8-1-hardware-cert-requirements-system.pdf It's on pages 5-6 (of 276).

Thoughts? I can see why businesses might want to have it, but I see it as a liability for personal computers. As a regular person buying a computer for myself, I have no use for it, and if anything it's a liability since it may be used to restrict what software runs, and there's the question of whether the TPM is itself trustworthy. The German Federal Office for Security in Information Technology has said similarly (link in German).

It seems like this could also be used in an attempt to reduce use of other operating system such as Linux. Kind of like the existing Windows 8 Secure Boot, but with additional measures to keep machines Windows-only.

On the other hand, how many NBR members are aware if they currently have a TPM module in their computer? Intel's version is called TXT (Trusted Execution Technology). I can't recall hearing about AMD having similar technology in their chips. My desktop, with a K-series processor, doesn't have TXT or vPro, and while my laptop is old enough to not have either of those as well, though its chipset does support Intel Active Management Technology, which appears to be a related predecessor.

 

BitLocker could be useful, you're right, although with Vista/7 it's only available on Ultimate/Enterprise, and thus not available to most non-business users. 8 does allow it on Pro, so while not a reasonable option for most consumers, it is more so.

The issue with it being required for Windows Logo certification is that a lot of computer manufacturers are going to want their laptops to be Logo certified. Personally, like SecureBoot, I'd rather not have it at all on my own personal system than have it and have it disabled.

Thanks for the clarification on the differences between TXT, vPro, AMT, and TPM. Especially among the three Intel ones, it wasn't particularly clear how they all related.

 

TPM is also used for multi form factor authentication, You are able to store Virtual Smart Cards on the TPM, we use them for VPN access. In theory, a financial institution could issue one for more secured transactions. also Keys for Digital Content or identities can be stored on the TPM.

 

Heh; I prefer not to have 16:10 as well. TPM is more of a don't-really-want than a deal-breaker; Secure Boot would only be a deal-breaker if it couldn't be disabled (since I like to at least have the option of installing Linux or dual-booting older versions of Windows). I recently did come to a point where I had to decide whether to switch to a new laptop or fix up my old one; I decided to stick with the old one since it meets my requirements really well (16:10, matte, decent keyboard + touchpad, well-built... and cheaper to fix than to buy a new one). And with a desktop, I don't need great performance from my laptop anymore.