News
Microsoft's Windows 11 TPM Requirement Are Here to Stay
- By Chris Paoli
- December 06, 2024
With Windows 10 nearing its end of life, Microsoft is urging users to transition to Windows 11. However, a key hurdle for many is the requirement that PCs must support Trusted Platform Module (TPM) version 2.0 to install the new operating system.
As many aging PCs cannot meet this requirement before Windows 10 support ends in October 2025, Microsoft is confirming that its policy will not change.
Microsoft's latest OS has been out for over three years now, but still trails Windows OS user market share by a large margin. According to StatCounter's November 2024 figures, Windows 10 still holds 61.8 percent of the Windows market, compared to Windows 11's 34.9 percent.
In a blog post defending the company's decision, Microsoft's Steven Hoskings explained why the company will continue to keep the requirement in place, despite acknowledging that some organizations might struggle with being ready in time.
"It’s true that its implementation might require a change for your organization," wrote Hoskings. "Yet it represents an important step toward more effectively countering today’s intricate security challenges."
In Windows 11, TPM 2.0 offers advanced encryption and key management capabilities, surpassing its predecessor, TPM 1.2. By integrating with features like Secure Boot and Windows Hello for Business, TPM 2.0 helps combat emerging security challenges more effectively, according to Microsoft.
Hoskings provides some advice for those organizations that want to make the migration before next year's deadline:
- Evaluate current hardware for TPM 2.0 compatibility. Conduct a thorough assessment of existing hardware with tools like Microsoft Intune. Determine which systems meet the TPM 2.0 requirements and identify any upgrades needed.
- Plan and budget for upgrades. Develop a detailed plan and budget for upgrading non-compliant hardware to TPM 2.0. Consider the long-term benefits of enhanced security and compliance with regulatory standards.
- Review security policies and procedures. Update the organization's security policies and procedures to incorporate the use of TPM 2.0. Facilitate team member training on new protocols and the importance of maintaining a secure IT environment.
Further, those who cannot make the jump can continue to run Windows 10 through the company's extended support program, which will cost $61 per device for the first year of out-of-band security updates and increase from there every year. However, extended support will not last forever and those holdouts will need to upgrade at some point in the future.
"In conclusion, TPM 2.0 is not just a recommendation – it's a necessity for maintaining a secure and future-proof IT environment with Windows 11," wrote Hoskings. "And it's an important part of the larger Zero Trust strategy, alongside Secure Boot, Credential Guard, and Windows Hello for Business."