confidentiality

Microsoft launched Windows 11 in 2021, requiring a Trusted Platform Module (TPM) that adheres to the TPM 2.0 standard for enhanced security. A TPM is a secure cryptoprocessor that manages security tasks and encryption keys, reducing unauthorized access risks. The TPM architecture is defined by the ISO/IEC 11889 standard, focusing on cryptographic operations with integrity protection, isolation, and confidentiality. TPMs can be integrated as discrete chips, embedded in firmware, or incorporated into CPUs. Most PCs designed in 2016 or later have TPM 2.0 enabled by default. Intel and AMD have integrated TPM features into their CPUs since then, while older PCs may have TPMs adhering to the older TPM 1.2 standard, which is not supported by Windows 11. Some TPMs may be disabled in BIOS or firmware settings. The TPM processes cryptographic operations and stores private keys, enabling features like Secure Boot, which prevents unauthorized modifications to the operating system, and supports biometric authentication through Windows Hello. It also safeguards BitLocker keys for disk encryption. Both Windows 10 and 11 automatically initialize the TPM during installation. TPM functionality is available on Linux PCs and IoT devices, while Apple devices use a Secure Enclave for similar functions. Users can check their TPM status in Device Manager under Security Devices. Upgrading from Windows 10 to Windows 11 requires a minor registry adjustment if a TPM is present. If a TPM is absent, a utility called Rufus can bypass hardware checks for Windows 11 installation.