TPM Archives

Winsage

July 20, 2026

Enable BitLocker on Windows 11: 11 Steps, 45 Min [2026]

A stolen laptop can lead to a significant data breach, particularly when taken from public places. Windows 11 has introduced BitLocker, a full-disk encryption feature that became mandatory for Australian businesses in 2026. The Office of the Australian Information Commissioner reported 766 notifiable data breaches in the latter half of 2024, with unauthorized access to devices being a major cause. Full-disk encryption is crucial for compliance with the Essential Eight framework, which mandates data protection on portable devices. BitLocker ensures that data on an encrypted drive becomes unreadable if the drive is removed and connected to another computer. It aligns with the Essential Eight framework, requiring evidence of encryption rather than just claims of protection. There are three types of encryption on Windows 11: Device Encryption, BitLocker Drive Encryption, and File-Level Encryption. BitLocker is available only on Windows 11 Pro and higher editions. To use BitLocker, certain prerequisites must be met, including having Windows 11 Pro or higher, a Trusted Platform Module (TPM) 2.0, UEFI firmware with Secure Boot enabled, and local administrator rights. The process to enable BitLocker involves confirming the edition, checking TPM status, enabling BitLocker through Windows Settings or PowerShell, and backing up the recovery key. Organizations can deploy BitLocker fleet-wide using Microsoft Intune, and additional security measures like TPM+PIN can be implemented for pre-boot authentication. Common pitfalls during BitLocker rollout include skipping recovery key backup and assuming that Home edition machines are covered. Troubleshooting common BitLocker issues involves identifying symptoms and applying appropriate fixes. Advanced tips for enhancing security include suspending BitLocker before maintenance and auditing compliance at the fleet level. BitLocker is integral to protecting data on portable devices, and compliance documentation is essential for proving that every device has an active recovery key.

Winsage

July 20, 2026

Windows 11’s biggest updates may need multiple reboots, but that’s normal, don’t force shutdown

Users may experience double reboots when installing substantial Windows updates, such as the April and July 2026 Updates, due to factors like Secure Boot and .NET Framework updates. The July 2026 .NET Framework update specifically requires a separate reboot. Microsoft is still rolling out the Secure Boot 2023 certificate update, which may also lead to multiple reboots. Users are advised not to panic during these reboots and to allow the system time to complete the installation process. Additionally, Microsoft has warned against delaying updates for more than three days due to increasing update sizes related to security vulnerabilities. Some users may encounter SCEP certificate errors in the Event Viewer after the July 2026 Update, but these errors do not indicate a failure of the update process.

Winsage

July 20, 2026

Windows 11 Version 26H2 Ships as an Enablement Package With No New Features Over 25H2

Microsoft is set to release Windows 11 version 26H2, an enablement package based on version 25H2, without introducing new features at launch. The update will require only a single restart for devices on versions 25H2 or 24H2, while users on older versions, such as 23H2 or Windows 10, will need a full feature update. Both versions share identical features and are built on the same platform, with version 26H2 using build numbers in the 26300 series. The update process will vary depending on the current version, and version 26H2 will not change hardware requirements. Microsoft plans a gradual rollout of the update, initially as an optional install. Version 26H2 aims to extend support, adding approximately a year to the support timeline, with version 25H2 support continuing until October 2027. Users should verify their current version and back up important files before upgrading.

Winsage

July 19, 2026

Windows 11’s big 2026 update is almost here, and these 10 things you need to know before upgrading could save you time and frustration

Microsoft is set to launch the 2026 Update for Windows 11, known as version 26H2, later this year. This will be the fifth feature update for the operating system. The upgrade from version 25H2 to 26H2 will utilize an Enablement Package (eKB), allowing for a transition similar to a standard monthly cumulative update without requiring a full reinstallation. Users can also upgrade from Windows 10 using an ISO file or Microsoft installation media, which ensures files, applications, and settings remain intact. Upgrading to version 26H2 extends the support lifecycle of devices by an additional year, with Microsoft providing 24 months of support for Home and Pro editions and 36 months for Enterprise and Education editions. Version 25H2 will continue to receive support until October 2027, and users are advised to plan upgrades before this support ends. Windows 11 version 26H2 has the same hardware requirements as version 25H2, which include a 1GHz processor with at least two cores, 4GB of RAM, 64GB of storage, UEFI firmware with Secure Boot, TPM version 2.0, DirectX 12 compatible graphics, and a high-definition display. The rollout of the update will be gradual, following a Controlled Feature Rollout (CFR) strategy, meaning not all devices will receive the update immediately.

Winsage

July 18, 2026

Windows 11 Secure Boot certificates have expired, and Microsoft says what to do next

Microsoft held its OEM Secure Boot Office Hours event on July 15, where engineers collaborated with OEM representatives from companies like Acer, Asus, Cisco, Dell, and HP. IT administrators were able to ask live questions about the Secure Boot 2023 rollout. The discussion thread became a detailed technical record, especially following the expiration of the first certificates three weeks prior. Concerns raised by IT admins included BitLocker recovery loops, stuck confidence ratings, and unhelpful Intune error codes. Key facts include: - Devices offline for long periods will still receive the 2023 certificates upon reconnecting to Windows Update. - Devices with existing 2023 certificates in firmware will switch to the new boot manager after the latest Windows patches are installed. - A new script, Detect-SecureBootCertUpdateStatus.ps1, is available in Windows for checking certificate status. - BIOS updates may reset a device’s confidence rating to unrated, which is normal and does not indicate certificate failure. - Admins should edit the AvailableUpdates registry key, not the AvailableUpdatesPolicy, which is managed by Intune and Group Policy. - A licensing bug affecting AvailableUpdatesPolicy on devices upgraded from Pro to Enterprise was resolved by Microsoft in 2026. - BitLocker recovery is not typically linked to the certificate update process but may relate to firmware or PCR issues. - Dell and HP provided guidance on which BIOS versions include the 2023 certificates for their newer models. - Older HP EliteBook 840 G5 units require a manual update package for the new certificates. - Eligible devices can still receive the 2023 certificates in the future, and Surface devices released from 2024 onward come pre-equipped with them. - Microsoft confirmed that devices running 2011 certificates will not lose the ability to receive the 2023 chain. - The Microsoft Corporation KEK CA 2011 and Microsoft UEFI CA 2011 certificates have expired, with the Microsoft Windows Production PCA 2011 set to expire on October 19, 2026.

Winsage

July 17, 2026

Major Price Drop: Microsoft Office and Windows 11 down to $26

Microsoft Office Professional Plus 2019 and Windows 11 Pro are available for a one-time fee of .99, regularly priced at 9. This bundle includes a lifetime license for both products without any recurring fees. Microsoft 365 Personal costs .99 annually for only the Office suite, totaling nearly 0 over five years without an OS license. The Office 2019 suite includes core apps like Word, Excel, PowerPoint, Outlook, OneNote, Publisher, and Access, featuring enhanced tools and capabilities. Windows 11 Pro offers a sleek interface, robust security features, and productivity tools. Both licenses are perpetual, eliminating subscription management.

Winsage

July 17, 2026

Upgrade your PC with Microsoft Office and Windows 11 Pro for just $35 (Orig. $400+ value)

The Ultimate Microsoft Office Professional 2021 for Windows: Lifetime License + Windows 11 Pro Bundle is priced at .97, down from 9.99, offering savings of over 0. The bundle includes lifetime access to Microsoft Office 2021 and Windows 11 Pro until July 19. Key features of Office 2021 include Word, Excel, PowerPoint, Outlook, Teams, OneNote, Publisher, and Access. Windows 11 Pro features include biometric login, DirectX 12 Ultimate, Snap Layouts, Azure AD, Hyper-V, Windows Sandbox, and BitLocker encryption. The offer is available through StackSocial, and prices are subject to change.

Winsage

July 14, 2026

You Can Get Windows 11 Pro on Sale for A$14 Right Now

Windows 11 Pro is available for a limited time at a reduced price of A, down from A6, until July 16. It includes features such as Windows Copilot, a redesigned user interface, remote desktop access, TPM 2.0, Smart App Control, biometric login options, BitLocker device encryption, Azure Active Directory integration, Hyper-V, and Windows Sandbox. The offer is valid for updating a single PC, requiring a processor of at least 1GHz, 4GB of RAM, and 64GB of hard disk space.

Winsage

July 7, 2026

New Windows 11 Cloud Recovery Restores PCs And Drivers Without A USB Drive

Microsoft is introducing a new feature called 'Cloud rebuild' in the latest Windows 11 Insider Preview builds, which allows users to reinstall the operating system directly from Microsoft's servers without the need for installation media. This feature bypasses local issues that may prevent a system from resetting itself, as it connects to Windows Update to download a fresh copy of the OS. Cloud rebuild also improves driver handling by fetching hardware-specific drivers during the reinstall process, ensuring the machine is online and ready to go. Users must enroll in the Insider program's Experimental channel to access this feature, which appears under the Troubleshoot menu when a PC fails to boot multiple times. A wired Ethernet connection works immediately, while Wi-Fi requires entering the network password. However, the feature has caveats, including the need for a working network driver in the recovery environment and compliance with Windows 11 hardware requirements. The Cloud rebuild process completely wipes the system disk, erasing all local files, applications, accounts, and settings, although data synced to OneDrive remains intact. Microsoft warns against shutting down the system during the rebuild process, as it could prevent Windows from booting.

Winsage

July 7, 2026

Windows 11 Pro Has Dropped to Just $10 Through July 19

Windows 11 Pro is available for .97 until July 19, reduced from its standard retail price of 9. This offer is suitable for PCs that meet Microsoft's hardware requirements for Windows 11. Users should verify compatibility with Microsoft's PC Health Check tool. The operating system includes features such as BitLocker, Hyper-V, Windows Sandbox, and Azure AD Support, along with productivity enhancements like Snap Layouts, Biometric Sign-in, DirectX 12 Ultimate, and Copilot Integration. The license is perpetual and tied to a single compatible PC, delivered digitally after purchase.