Microsoft: Windows 11 requirement for a TPM 2.0 chip is "non-negotiable"

[Kirby1]

Except that is not fair. Microsoft allows several 7th gen intel processors, which do NOT have TPM 2.0, to run 11, simply because they were used in surface devices. Therefore, the TPM requirement is entirely arbitrary.

Besides, TPM 2.0 hardware keys exist, and can just plug into older motherboards. So that is still a totally BS excuse.

This may shock you, but there is a whole world outside america and western europe where core 2 duos are still commonly used. They cannot afford skylake or newer hardware. So they will be condemned to running obsolete OSes and we have another XP botnet scenario on our hands.

99.999% of people today do not use bitlocker. Unless you are the target of a national actor, nobody is going to crawl through your drive to get your passwords. A street thief is gonna flip your hardware at a pawn shop for a quick buck. If someone else wants in, they can bypass that encryption if they really want to. OR they could just boot your stolen PC and use a cold boot attack to get the encryption key. Womp Womp.

Again, windows 11 runs fine without TPM. It is not a "requirement" to run the OS. That is BS MS invented to force the sales of new licenses, to make $$$.

Because it runs perfectly fine on said hardware, the restrictions are entirely arbitrary. But please, continue to meatshield for the multi trillion dollar corpo, I'm sure that could never go wrong.

It's not Microsofts responsibility to prop up the third world. If you want to run old hardware, your going to need an old OS.

Are you going to complain that you can't install windows 11 on your Playstation 2?

Windows needs some kind of baseline of security. TPM2.0 is the line they are drawing, and it's a perfectly reasonable line.


Some Intel 7th gen devices do have TPM2.0. All 8th gen CPUs and later have it. Surface devices with windows 11 are running TPM2.0.



Also, TPM2.0 can be added to older PCs. You can buy a TPM2.0 module. If anyone really wants to run windows 11 on out dated and dirt cheap hardware, you can get a TPM2.0 chip add on.

 

[Kirby1]

I could not have said that better myself. Excellent!


Wonderful statement.

TPM2.0 is not all that secure. It's crackable and it's a PITA to work with in some ways. So yeah, crazy crap.


Apple users are a special breed and I'll leave that one right there.


TPM2.0 has it's own problems and, as was said above, can be cracked. It's not all that secure. Microsoft using it as a base for their security platform isn't just foolish and incompetent, it's a headache for normal users as well.

Yup, useless. And like TPM it's a PITA in many ways.


There is a reason for that: It doesn't improve security.

I am never going to use either one, ever.

TPM2.0 is not a headache for anyone. 99% of computer users don't even know it exists.

 

[erickmendes]

Microsoft: a
tiny11: Hold my beer

 

[opckieran]

M$ should fork Windows into a "Home" and "Classic" branch. I'm sure plenty of people would buy a license to be able to use a Win 7 remaster with a modernized, no-TPM framework, free of ads, bloat, and spyware. LTSC/B is close, but most of the general public doesn't have access to it!

Until then,
Reject Modernity
Embrace Linux
(seriously, check it out! It won't hurt your widdle PC)

 

[brucek]

The thing is that people whining about all this are the ones who expect to run the latest OS on their 15+ year old hardware.

Missed the point by a mile. Few people are demanding Windows 11 - many would like to stay on Windows 10. More generally, people understand they don't get new features for free. What is not understandable is Microsoft's unilateral decision to stop providing security updates for bugs it created and for which it has the fixes. This will turn hundreds of millions of devices into e-waste, and another hundreds of millions of devices into unsecured bot farms.

Consumers were and are perfectly happy with these older devices as they are save for Microsoft's own bugs, and would like to continue using them vs. being forced to paying hundreds of dollars for a new device they don't otherwise want.

Also, 2017 is seven years ago, not fifteen, and while once upon a time seven years was a very long time for tech devices the reality today is that many desktops from seven years ago are still as perfectly adequate for their regular household uses as they ever were. They may continue to be fine for many more years to come, which is probably the problem Microsoft and its partners are actually most worried about.

windows needs tpm to store encryption keys of
bitlocker, enterprise client certificate, spotify & netflix offline encryption keys etc.

That's nice but I think you'll find most regular households have much more pressing needs for their limited budgets than improved bitlocker (which their windows version probably doesn't have and isn't turned on if it does), enterprise client certificates (which don't apply to them), and improved DRM (which they won't notice one way or the other and is entirely for the benefit, if any, of large corporations.)

 

[Ben Myers]

Wow, that is quite the projection argument you've managed.

TPM does not increase security for home users, neither does bitlocker. Unless you are targeted by state actors or deal with thousands of bitcoin these things to NOT increase security.

They do, OTOH, make it impossible to retrieve your data when you arbitrarily get locked out of your always online MS account or your motherboard fails and of course you dont know the bitlocker password. Also ignore that windows 11 runs fine without it right now.....

Also, someone want to tell him that "swiss-cheese linux - unsecured" runs most of the modern internet? And that linux ships with all ports blocked by default so the firewall serves no purpose until you need to actually open something? Poor guy.

The unstated reason is pretty clear: control, control, control. MS is the same company that pays Phil Spencer, who has made it clear he and his bosses envision a world where if you say a naughty or doa bad, you should be banned not just from a game, but have all your internet accounts disabled. Real 1984 tier stuff. And the only way they can do that is if they can ban your hardware. Media companies have also long salivated at the idea of being able to track users regardless of accounts or IP address or network used to enforce DRM.

Now if there was a way to assign a hardware key to a PC to track everything you do and lo.....oh hey there TPM and Recall!

They have no issue with creating billions of tons of e-waste. All their "green" virtue signaling is for show, they can just cut down a forest and install some solar panels then brag about how "green" they are again. They'll keep pushing their arbitrary hardware list so long as people go along with it. Of course, with windows market-share steadily decreasing, who knows when they will start to sweat.

BitLocker?? Do you mean S**tLocker? I have had to rescue client data AND put it all on a replacement computer. BitLocker makes this a very lengthy and involved exercise. Well, my clients paid for my time and expertise. Best people can do is get rid of BitLocker, especially computers that stay put at home or in the office, where the odds of physical compromise of a computer are really low.

 

[Impudicus]

But windows 11 is completely functional without it. Maybe slightly less secure, but completely functional. Should simply be a use at own risk type of thing.

 

[ZedRM]

TPM2.0 is not a headache for anyone. 99% of computer users don't even know it exists.

Your opinion that clearly shows you have no experience backing it. Some of us DO have experience.

 

[Ben Myers]

Your opinion that clearly show you have no experience backing it. Some of us DO have experience.

And TPM 2.0 has been standard on quality systems ever since 4th or 5th gen Intel CPUs. Ignorance of or absence of TPM 2.0 is no excuse.

 

[ZedRM]

And TPM 2.0 has been standard on quality systems ever since 4th or 5th gen Intel CPUs. Ignorance of or absence of TPM 2.0 is no excuse.

Ignorance is a good choice of words...

 

[lripplinger]

This forced requirement of the TPM module, has also created more e-waste. Otherwise perfectly fine working hardware will end in up in the landfill.

 

[susbolas]

All Intel based PCs from the 8th gen or newer have TPM2.0. All AMD based PCs with Ryzen 2000 or higher have TPM2.0. This is hardware from 2017. I think it's fair to say if you have hardware older than that, you just don't get to run windows 11 on it.

Bro, I have an original Threadripper 1950x with TPM 2.0 and all other requirements. The only thing is I don't have a "compatible CPU". Why should I throw my PC in the garbage?