Microsoft has released its standards for a “highly secure Windows 10 device”.
“These standards are for general purpose desktops, laptops, tablets, 2-in-1s, mobile workstations, and desktops,” said Microsoft.
“This topic applies specifically and uniquely for Windows 10 version 1709, Fall Creators Update. Windows enterprise security features light up when you meet or exceed these standards and your device is able to provide a highly secure experience.”
The required standards include:
- Intel 7th-gen CPU / AMD 7th-gen CPU.
- Virtualization-based security requires the Windows hypervisor, which is supported on 64-bit IA processors or ARM v8.2 CPUs.
- Processor that supports Input-Output Memory Management Unit device virtualization and all I/O devices must be protected by IOMMU/SMMU.
- System must have virtual machine extensions with second level address translation.
- Systems must have a Trusted Platform Module , version 2.0, and meet the latest Microsoft requirements for the Trustworthy Computing Group specification.
- Intel Boot Guard in Verified Boot mode, or AMD Hardware Verified Boot, or an OEM equivalent mode with similar functionality.
- 8GB or more of RAM.