News Windows 11 to Ship Without TPM Requirement for 'Special Purpose' Systems

[Admin]

Microsoft's full Windows 11 minimum requirements document reveals that some systems won't have to abide by the TPM requirement.

Windows 11 to Ship Without TPM Requirement for 'Special Purpose' Systems : Read more

 

[Diabl0]

Tried turning on fTPM and SecureBoot on my B450 board and I am still getting a no go on Win11 compatibility. Funny on a two year old PC. Might resort to this special ISO. Or just buy a TPM module for 11 Euro.

 

[rocky01]

Torque off half your users?
Seems like folly added on top of the Windows10-Updates-breaking-stuff debacles. Something is wrong in Redmond. No mention of privacy in rollout? Multiple unforced errors -- keep coming.

 

[-Fran-]

What is Microsofts BS reason to require TPM in the first place? All I've read is they require it, but nowhere I've found a proper explained reasoning as to why they do. Anyone care to ellaborate, please?

Regards.

 

[USAFRet]

What is Microsofts BS reason to require TPM in the first place? All I've read is they require it, but nowhere I've found a proper explained reasoning as to why they do. Anyone care to ellaborate, please?

Regards.

Info - Why win 11 needs Trusted Platform Module

Security by design: Built-in and turned on Security by design has long been a priority at Microsoft. What other companies invest more than $1 billion a year on security and employ more than 3,500 dedicated security professionals? We’ve made significant strides in that journey to create...

forums.tomshardware.com

I think they are overreaching, but this, so far, is their justification.

 

[dimar]

Do you really need a TPM if you're not using storage encryption?
I enabled PTT setting in the BIOS, and got Trusted Platform Module 2.0 in device manager on Asus Strix Z390-E.
If Microsoft forces storage to become encrypted , how will that effect file recovery of damaged HDD/SSD?

 

[-Fran-]

Info - Why win 11 needs Trusted Platform Module

Security by design: Built-in and turned on Security by design has long been a priority at Microsoft. What other companies invest more than $1 billion a year on security and employ more than 3,500 dedicated security professionals? We’ve made significant strides in that journey to create...

forums.tomshardware.com

I think they are overreaching, but this, so far, is their justification.

Thanks for that.

So Windows is trying to control our PCs by making this mandatory further implying we will no longer even be able to run software we want to run.

Great, just what we all needed: more nanny companies.

Regards.

 

[ezst036]

This will get hacked real quick and that TPM requirement will be "gone".

 

[peachpuff]

This will get hacked real quick and that TPM requirement will be "gone".

I'll bet it'll be as easy as editing setup.ini in the windows iso and setting tpm flag to 0.

 

[velocityg4]

Tried turning on fTPM and SecureBoot on my B450 board and I am still getting a no go on Win11 compatibility. Funny on a two year old PC. Might resort to this special ISO. Or just buy a TPM module for 11 Euro.

If you can still get one at 11 Euro. You better buy it whether you're sure you need it or not. They're already scalping at $80 to $100.

 

[ReallyBigMistake]

Sadly MS has betrayed us yet again

 

[JohnMD1022]

Time to return to Linux.

 

[ReallyBigMistake]

Time to return to Linux.

No my friend we must go back even further..... we must return to CP/M

 

[foxrox]

Installing the new operating system on a system without TPM will require special approval from Microsoft

Only Kool-Aid drinking shills seek the "approval" of reprobates. Those that have functional reproductive organs do as they please without seeking approval, permission, or blessing. The mere fact that they have a self-anointed position of arbiter concerning matters that are absolutely none of their business demonstrates how deep their corrupt quest for control is rooted. Such efforts should be resisted and thwarted. We should never bow, bend a knee or acquiesce to their control-freak dictatorship nonsense. Defiance is the only path that leads to freedom.

 

[RareAir23]

The TPM requirement is an intriguing requirement that incorporates with it a lot of questions from users like us. As I said in a previous post, in my years and place of being an IT Help Desk Specialist professional for going on 20 years now altogether the only time I've seen TPM used actively is if you're using disk encryption like BitLocker with Windows. Adding to that, using TPM and having it break down on you can not just affect BitLocker (BitLocker will also ask for your disk recovery key instead of your set PIN) but it can also break programs like Microsoft Teams and Microsoft Outlook. Based on that, if Microsoft is requiring TPM 2.0 (or TPM from your CPU firmware if it has it built in) that leads to me having a hunch (where I am confirming or denying anything but just saying its a hunch) they also want disk encryption on your OS install of some kind. Question is which disk encryption and from where? I guess we'll soon see as Microsoft can't be held quiet about that forever. Out!

 

[RodroX]

If having a PC in my home will become annoying like to require a TPM 2.0 tech or fTPM support, which I have no use or need at the time of writing, and to enable some hardware encryption I do not want to use,.... then ima just get a console and learn to use a joystick for FPS , when the time comes of course.

But considering Windwos 7 still getting updates from nvidia, I think theres no much need to worry for now.

After all Windows 10 will be the last windows... right? Perhaps this is why Windows 10 is the last windows, because MS in all its wisdom wanted even more.

 

[foxrox]

The TPM requirement is an intriguing requirement that incorporates with it a lot of questions from users like us. As I said in a previous post, in my years and place of being an IT Help Desk Specialist professional for going on 20 years now altogether the only time I've seen TPM used actively is if you're using disk encryption like BitLocker with Windows. Adding to that, using TPM and having it break down on you can not just affect BitLocker (BitLocker will also ask for your disk recovery key instead of your set PIN) but it can also break programs like Microsoft Teams and Microsoft Outlook. Based on that, if Microsoft is requiring TPM 2.0 (or TPM from your CPU firmware if it has it built in) that leads to me having a hunch (where I am confirming or denying anything but just saying its a hunch) they also want disk encryption on your OS install of some kind. Question is which disk encryption and from where? I guess we'll soon see as Microsoft can't be held quiet about that forever. Out!

Probably whatever option gives them and their technology cartel buddies the easiest backdoor access.

 

[Papusan]

But considering Windwos 7 still getting updates from nvidia, I think theres no much need to worry for now.

After all Windows 10 will be the last windows... right? Perhaps this is why Windows 10 is the last windows, because MS in all its wisdom wanted even more.

Nvidia will stop support for Win 7 in 31. August. And AMD have already killed driver support for Win 7 with latest beta drivers this month. I'm sure Microsoft helped on that decision. What left is Win 10 and the new Apple similar OS called Win 11.
http://forum.notebookreview.com/thr...rs-welcome-too.810490/page-1113#post-11102278

 

[jpe1701]

If having a PC in my home will become annoying like to require a TPM 2.0 tech or fTPM support, which I have no use or need at the time of writing, and to enable some hardware encryption I do not want to use,.... then ima just get a console and learn to use a joystick for FPS , when the time comes of course.

But considering Windwos 7 still getting updates from nvidia, I think theres no much need to worry for now.

After all Windows 10 will be the last windows... right? Perhaps this is why Windows 10 is the last windows, because MS in all its wisdom wanted even more.

Ah maybe this is the strategy all along, to make pc so annoying and absurd that everyone just buys an Xbox.

 

[foxrox]

Ah maybe this is the strategy all along, to make pc so annoying and absurd that everyone just buys an Xbox.

Yes, exactly. It is easier for them to control everything and stroke their god ego with an XBOX. It is far more difficult for them to do with PC. They are frantically grasping for ways to control something they have no right whatsoever to have any level of control over.

 

[USAFRet]

Lets keep the comments in check people....NO politics.
Thanks.

 

[RealBeast]

W10 has support through October 14, 2025, so this really is nothing to get excited about. At least four years before there is any issue.

I'm very happy with just running W10 until at least that time -- especially since only one of our current eight machines can actually run 11.

 

[foxrox]

Not enough people zombie kids cared about Windows X or the pathetic/anemic trash it was designed to run on, so they scrapped it. Or did they just tweak it a little and try to minimize their failure by reintroducing the same namby-pamby trash OS for PC? Surprise! Here's Windows 11. It is also designed to run on pathetic trash computing devices. Why would anyone want an abortion like this for a PC operating system?

 

[RodroX]

W10 has support through October 14, 2025, so this really is nothing to get excited about. At least four years before there is any issue.

I'm very happy with just running W10 until at least that time -- especially since only one of our current eight machines can actually run 11.

I can only imagine what will happend tomorrow at work when we (the IT deparment) may be asked to tell the big boss if our PC ecosystem is compatible or not with Windows 11, and that will mean checking how many PC and notebooks are not.
God, I shouldnt think about this stuff on sunday...... sniff

 

[t.kolson]

message also to those who wrote and published the article:

Have you had direct contact with someone from Microsoft who explained it differently? Because in the document that has been linked related to the windows 11 requirements is written clearly that, upon approval from Microsoft, some OEM systems are only not required to have TPM ENABLED but it still MUST BE PRESENT on the systems. So Microsoft don't allow some systems to ship without support for TPM 2.0 but only without it enabled. At least that's what it says.

3.6 Security
3.6.1 Trusted Platform Module (TPM)
All device models, lines or series must implement and be in compliance with the International Standard ISO/IEC 11889:2015 or the Trusted Computing Group TPM 2.0 Library and a component which implements the TPM 2.0 must be present and enabled by default.

The following requirements must be met:

•All TPM configurations must comply with local laws and regulations.
•Firmware-based components that implement TPM capabilities must implement version 2.0 of the TPM specification.
•An EK certificate must either be pre-provisioned to the TPM by the hardware vendor or be capable of being retrieved by the device during the first boot experience.
•It must ship with SHA-256 PCR banks and implement PCRs 0 through 23 for SHA-256. Note that it is acceptable to ship TPMs with a single switchable PCR bank that can be utilized for SHA-256 measurements.
•It must support TPM2_HMAC command.

A UEFI firmware option to turn off the TPM is not required. Upon approval from Microsoft, OEM systems for special purpose commercial systems, custom order, and customer systems with a custom image are not required to ship with a TPM support enabled.

For detailed and to-to-date TPM requirements, refer to the relevant section in Windows Hardware Compatibility Program requirements