TPM Archives

Winsage

August 9, 2026

Until the end of the day, Windows 11 Pro is only $11.23

Windows 11 Pro is available for .23 with the code AUG25, but this offer is only valid today. The standard price is 9. Windows 11 Pro includes features like BitLocker encryption, Hyper-V, Windows Sandbox, Azure AD connectivity, Snap layouts, DirectX 12 Ultimate, TPM 2.0 for biometric login, and an integrated Copilot in the taskbar. A single license allows installation on one machine indefinitely.

Tech Optimizer

August 7, 2026

Best Antivirus Software August 2026: I Tested the Top 5

The top five antivirus software packages for 2026 are: 1. Norton 360: - Best overall antivirus software. - First-year pricing: .99 for Standard, .99 for Deluxe, .99 for Select Plus. - Features: Fastest scanner, uncapped VPN, robust firewall, 50 GB cloud backup, dark web monitoring, and a refund guarantee. - Detection rate: 99.8% with three false alarms. - Scan times: Quick scan in 58 seconds, full scan in 13 minutes and 22 seconds. - Renewal prices: .99 for Standard, .99 for Deluxe, .99 for Select Plus. 2. Bitdefender: - Best value and lightest on system resources. - First-year pricing: .99 for Antivirus Plus, .99 for Total Security, .99 for Family. - Features: Advanced Threat Defense, multi-layer ransomware remediation, Safepay banking browser. - Detection rate: 99.8% with five false alarms. - Scan times: Quick scan in 1 minute and 4 seconds, full scan in 14 minutes and 3 seconds. - Renewal prices: .99 for Antivirus Plus, .99 for Total Security, .99 for Family. 3. Avast One: - Best free antivirus and ideal for gamers. - Free tier available; paid options start at .99 for the first year. - Features: Modular features allowing users to activate only what they need. 4. NordVPN Threat Protection Pro: - Best antivirus and VPN in one. - Pricing starts at .49 per month on the Complete plan. 5. McAfee+: - Best for unlimited devices and mobile. - First-year pricing: .99 for unlimited devices. - Features: Top-notch mobile applications. Overall rankings are based on independent lab results, system impact, bundled features, two-year cost, and customer support. Norton 360 is rated 4.8/5, and Bitdefender is rated 4.7/5.

Winsage

August 6, 2026

Windows 10 LTSC 2021 has five months before security updates cost extra

Microsoft has announced that support for Windows 10 Enterprise LTSC 2021 will end on January 12, 2027, coinciding with the release of a final security update. Organizations can enroll in the Extended Security Updates (ESU) program to maintain security updates beyond this date, which will cost per device in Year 1, with prices doubling each subsequent year until the program ends on January 8, 2030. ESU sales will start on September 1, 2026, and licenses are cumulative. The ESU program does not cover Windows 10 IoT Enterprise LTSC, which is supported until January 13, 2032. Organizations using Microsoft’s cloud-based update services can receive a 25 percent discount on the Year 1 price. As of July, 16.9 percent of monitored devices were still running Windows 10, with migration to Windows 11 stalling due to compatibility issues and hardware requirements.

Winsage

August 4, 2026

Microsoft Expands Windows Hello ESS to External Fingerprint Readers

Microsoft is integrating Windows Hello Enhanced Sign-in Security (ESS) with compatible external fingerprint readers, allowing passwordless sign-ins on a wider range of Windows 11 devices. This update enhances biometric authentication security by utilizing hardware-backed protections such as the Trusted Platform Module (TPM) and Virtualization-Based Security (VBS), which isolate sensitive biometric data from malware and unauthorized access. Previously, only devices with integrated fingerprint sensors could fully utilize ESS, but the recent update (KB5101684) enables external fingerprint readers to function within the ESS framework. The update is being rolled out for Windows 11 versions 25H2 and 24H2, and users can set up fingerprint authentication by connecting a compatible reader. This advancement aids IT administrators in implementing passwordless authentication while maintaining security protocols.

Winsage

August 1, 2026

Not sure whether to use Windows Hello or Enhanced Sign‑in Security? This breakdown makes the choice easy

Microsoft will introduce Enhanced Sign-in Security (ESS) in the August 2026 update for Windows 11, allowing support for compatible external fingerprint readers. ESS aims to enhance the security of the authentication process rather than improve the accuracy of biometric recognition. Unlike standard Windows Hello, which processes biometric authentication through the operating system, ESS utilizes Virtualization-Based Security (VBS) and Trusted Platform Module (TPM) 2.0 to isolate sensitive operations in a protected environment. ESS-compatible fingerprint readers have dedicated secure processors, store templates internally, and communicate with the operating system via encrypted channels. Users can enable ESS by navigating to Settings > Accounts > Sign-in options on their devices. If a device does not support ESS, standard Windows Hello remains a robust authentication option.

Winsage

August 1, 2026

Windows Hello vs. Enhanced Sign‑in Security: Which sign‑in method actually keeps your Windows 11 PC safer, and what’s the difference?

Microsoft will introduce Enhanced Sign-in Security (ESS) in the August 2026 update for Windows 11, which will support compatible external fingerprint readers. ESS aims to strengthen the authentication process against potential attacks by shifting processing to isolated, hardware-protected environments using Virtualization-Based Security (VBS) and TPM 2.0 technology. Unlike standard Windows Hello, which processes biometric authentication through the operating system, ESS-compatible devices perform more processing within the hardware itself, ensuring that only authentication results are sent to the OS. To enable ESS, users must navigate to Settings > Accounts > Sign-in options and follow prompts to set up their fingerprint recognition. Existing non-ESS biometric enrollments will be removed during the upgrade to ensure security.

Winsage

July 30, 2026

ThinkPads from 2008 are some of the hottest used laptops right now — Here’s how (and why) they’re being turned into Windows 11 PCs

The ThinkPad X210Ai is a modified laptop that combines the chassis of older ThinkPad models (X200/X201) with a modern mainboard from TP Art, featuring Intel Core Ultra processors, DDR5 RAM support, dual M.2 SSD slots, Thunderbolt 4, and HDMI 2.1. The modification allows users to retain the original display and keyboard while requiring some chassis adjustments. TP Art offers a kit starting at 9, with complete builds beginning at 9, excluding RAM and storage. The popularity of the X210Ai has surged due to rising RAM prices and the demand for reliable, customizable machines. The modified board allows compatibility with Windows 11 and various Linux distributions. Processing times for orders can take up to six months, and cancellations are not allowed once placed.

Winsage

July 29, 2026

Microsoft will make it harder to illegally activate Windows and close a popular piracy loophole

Microsoft is requiring the use of TPM 2.0 security modules for Key Management Service (KMS) activation servers to combat unlicensed software and corporate piracy. KMS, used by organizations for mass activation of devices, has been targeted by hackers who create counterfeit servers. The new protocol mandates that KMS hosts validate their hardware credentials through the TPM 2.0 chip before activating client devices. This initiative will mainly affect illegal infrastructures in the corporate sector, while legitimate PC users will not be impacted. Starting in August 2026, Windows Server 2025 will introduce hardware readiness alerts to help system administrators prepare for these changes. TPM 2.0 has been required for Windows 11 since 2021, and its application is being expanded to address vulnerabilities in volume licensing.

Winsage

July 29, 2026

Windows BitLocker is fine. I still don’t trust it with everything

BitLocker is an encryption tool in Windows that secures data using a system of keys, with some keys stored in the motherboard's Trusted Platform Module (TPM) and others on the storage drive. Users must save a recovery key to prevent data loss, which can be stored on a removable disk, printed, or uploaded to the cloud. For Home license users, the recovery key usually defaults to cloud storage. Recently, vulnerabilities in BitLocker, including the "YellowKey" flaw, have been discovered, allowing individuals with physical access to bypass encryption. A second vulnerability was identified in June, also exploiting physical access to circumvent BitLocker's security.

Winsage

July 29, 2026

Microsoft reportedly using TPM chips to weed out Windows piracy

Microsoft's Trusted Platform Module (TPM) 2.0 has been integral to Windows 11's security since its launch in 2021. TPM is now standard in most CPUs, allowing Microsoft to enhance device activation security. The current Key Management Service (KMS) model has vulnerabilities that hackers exploit, prompting the need for stronger device identity and activation integrity assurances. TPM provides a hardware-level security mechanism for the activation process, where KMS hosts must present TPM credentials to validate their hardware identity and confirm they are uncompromised. Starting with upcoming Windows Server releases, KMS hosts will be required to prove they run on verified hardware before activating clients. By August 2026, Windows Server 2025 will help administrators prepare for these changes.