Security News > 2021 > August > How to get the Windows 11 security protections on an existing PC

Speaking at a virtual "Ask Me Anything" event about Windows 11, David Weston, partner director of enterprise and OS security at Microsoft, talked about leveraging hardware to "Raise the security baseline to a level much higher than Windows 10 or any other previous version of Windows."

Memory integrity is only turned on by default on a new PC that ships with Windows 11, or if you reimage a PC with Windows 11.

Generally speaking, HVCI and VBS security features don't have much impact on performance, but Microsoft is being extra cautious when you're upgrading an existing PC so that you don't feel that Windows 11 is a worse experience than Windows 10 just because it turns on security features you could have been using but weren't.

You need a slightly more powerful PC to get the hardware security features turned on automatically than just to run Windows 11: Microsoft says they will be on by default on new and reimaged PCs with Intel 11th generation, AMD Ryzen 3000 or later or Qualcomm 8C or later CPUs, 64GB or larger SSD and 8GB of RAM rather than the 4GB specified for Windows 11.

If hardware security isn't turned on-in Windows 11 or Windows 10-you can enable it yourself from the Windows Security app in Settings, under Device security, Core isolation.

For those who aren't ready to move to Windows 11, you don't need to worry about being unable to get future feature releases if you don't have a version 2.0 TPM in your Windows 10 PC. At the virtual Windows 11 event, Microsoft also confirmed that Windows 10 will not require TPM 2.0, even in future releases.

News URL

https://www.techrepublic.com/article/how-to-get-the-windows-11-security-protections-on-your-windows-10-pc/#ftag=RSS56d97e7