I denne artikel vil vi diskutere forskellige nye sikkerhedsfunktioner^{(new security features)} og foranstaltninger, der er indbygget i Windows 11 . Windows 11 laver buzz rundt om hjørnet og er klar til at blive frigivet^{(set to release)} i anden halvdel af 2021. Det har fået alle til at snakke og undre sig over, hvad der er nyt i denne nye version. Selvom der er introduceret en masse nye funktioner i Windows 11^{(new features introduced in Windows 11)} , er nogle features are deprecated/ removed . Denne gang har Microsoft primært fokuseret på at forbedre sikkerhedsfunktionerne i Windows 11 for at beskytte brugerne mod forskellige nye trusler og angreb. Den nye Windows 11 er sikker ved design og indbyggede krav.

Microsoft siger i Windows 11 -meddelelsesbegivenheden:

“We have worked closely with our manufacturer and silicon partners to raise security baselines to meet the needs of the evolving threat landscape and the new world of hybrid work and learning.”

Også:

“The new set of hardware security requirements that comes with Windows 11 is designed to build a foundation that is even stronger and more resilient to attacks.”

Microsoft sørger for at forbedre sikkerhedsgrundlaget gennem indbygget sikker opstart, hardwarevirtualiseringssikkerhedsfunktioner, Hypervisor-beskyttet kodeintegritet^{(Code Integrity)} og meget mere sikkerhedsbaserede implementeringer i Windows 11 .

David Weston , Microsofts direktør^(Director) for Enterprise and OS Security , udtalte, at:

“This next generation of Windows will raise the security baseline by requiring more modern CPUs, with protections like virtualization-based security, hypervisor-protected code integrity and Secure Boot built-in and enabled by default to protect from both common malware, ransomware and more sophisticated attacks.”

Lad os nu se på, hvordan Windows 11 vil have større sikkerhedsfunktioner sammenlignet med tidligere udgivelser.

Nye sikkerhedsfunktioner i Windows 11

Her er de nye sikkerhedsfunktioner, der er indbygget i Windows 11 :

1. Trusted Platform Module (TPM)
2. Understøttelse af Azure-baseret Microsoft Azure Attestation
3. Nye sikkerhedsinnovationer^{(New Security Innovations)} som Microsoft Pluton sikkerhedsprocessor
4. Pc'er med sikker kerne
5. Microsoft vil have dig til at droppe adgangskoder helt.

Lad os diskutere disse i detaljer!

1] Trusted Platform Module (TPM)

Trusted Platform Module ( TPM ) er en af ​​de mest fremtrædende sikkerhedsfunktioner i Windows 11 . TPM er en chip, der bruges til at sikre fortrolige og følsomme data som krypteringsnøgler, brugerlegitimationsoplysninger og mere på bagsiden af ​​en hardwarebarriere. Efterhånden som angribere bliver klogere og bruger avancerede teknikker til at manipulere data på din pc, vil dette hjælpe med at beskytte din pc mod malware, ransomware og andre cyberangreb. TPM - chip tilføjes til CPU'en^(CPU) individuelt eller integreret i din computers bundkort.

Microsoft har gjort TPM til et minimumskrav for at køre Windows 11^{(minimum requirement to run Windows 11)} . Så du kan kun køre Windows 11 , hvis din pc har indbyggede TPM - chips. Selvom nogle avancerede pc'er bruger TPM - chips. Men nu er det blevet en nødvendighed for at bruge Windows 11 på din pc. Ellers vil du ikke være i stand til at opgradere til Windows 11 .

For at gøre det nemmere for brugerne vil TPM 2.0- chips blive integreret i alle certificerede Windows 11 -systemer, så kunderne kan drage fordel af sikkerheden understøttet af en hardwarerod af tillid.

Læs^(Read) : Sådan bruger du Windows Security i Windows 11 for den bedste beskyttelse.

2] Understøttelse^(Support) af Azure-baseret Microsoft Azure Attestation

Azure-baseret Microsoft Azure Attestation ( MAA ) verificerer grundlæggende pålideligheden af ​​flere platforme, før du får adgang til den. Windows 11 har out-of-the-box support til Azure-baseret Microsoft Azure Attestation . Når kunder får adgang til følsomme ressourcer i skyen, aktiverer MAA Zero Trust -politikker for at sikre, at platformen er sikker. Azure Attestation-støttede politikker bekræfter både identitet og platform, der hjælper organisationer med at beskytte organisationens ressourcer.

Læs^(Read) : Hvorfor er min pc ikke kompatibel med Windows 11?^{(Why is my PC not compatible with Windows 11?)}

3] Nye sikkerhedsinnovationer^{(New Security Innovations)} som Microsoft Pluton sikkerhedsprocessor

Windows 11 kommer med forskellige nye sikkerhedsinnovationer. Disse omfatter hardware-tvungen stackbeskyttelse^{( hardware-enforced stack protection)} , Microsoft Pluton-sikkerhedsprocessor^{(Microsoft Pluton security processor)} osv. Dette vil sikre at beskytte brugere mod nul-dages udnyttelse og også styrke Zero Trust - sikkerheden. Zero Trust sikkerhedstilgang sikrer grundlæggende at verificere alle og alt, der ønsker at få adgang til ressourcer på et privat netværk. Dette er en anden vigtig sikkerhedsopdatering i Windows 11 .

Læs^(Read) :  Windows 11 Systemkrav^{(Windows 11 System Requirements)} .

4] Pc'er med sikker kerne

Secured-core pc'er^(PCs) tilføjer et ekstra sikkerhedslag under OS ved at kombinere identitet, virtualiseringsbaseret sikkerhed, operativsystem og hardware- og firmwarebeskyttelse. De er dobbelt så modstandsdygtige over for malwareinfektion og firmwareangreb. Og de gør det muligt for brugere at starte sikkert, være sikret mod firmwaresårbarheder, blokere uautoriseret adgang og mere.

Læs^(Read) : Windows 11-produktlivscyklus og serviceopdatering^{(Windows 11 Product Lifecycle and Servicing Update)} .

5] Microsoft vil have dig til at droppe adgangskoder

Som standard vil de nye Windows 11 -enheder nu være uden adgangskoder fra dag ét. Du behøver ikke indtaste adgangskoden nu for at logge ind. Med Windows Hello bevæger Windows 11 sig mod stærkere godkendelsesmetoder, herunder ansigtslås^(Face) , fingeraftryk^{(Fingerprint)} , iris og anden biometri. IT-administratorer i virksomheder kan implementere Windows Hello for Business , der involverer granulær kontrol af godkendelsesmetoder.

Windows 11 fokuserer primært på hardwaresikkerhedskrav for at afbøde forskellige firmwareangreb, zero-day exploits, malwareinfektion og andre cyberangreb. Al denne nye hardwaresikkerhed er kompatibel med kommende Pluton-udstyrede systemer og enheder, der bruger en TPM 2.0 sikkerhedschip, inklusive Dell , HP, Acer , ASUS og mange flere. Det ovenfor diskuterede design og de indbyggede funktioner kombineret tilføjer ekstra sikkerhedslag til Windows 11 . Microsofts^(Microsoft) hovedformål denne gang er at forbedre produktiviteten med et forbedret sæt indbyggede sikkerhedsfunktioner.

Læs nu: ^{(Now read: )}Planlægger du Windows 11-implementering?^{(Planning for Windows 11 Deployment?)}

New Security Features in Windows 11

In thіs article, we will discuss varioυs new security features and measures that are incorporated in Windows 11. Windows 11 is making buzz around the corner and is all set to release in the second half of 2021. It has got everyone talking and wondering what’s new in this new version. While there are a lot of new features introduced in Windows 11, some features are deprecated/ removed. This time, Microsoft has primarily focussed on improving the security features in Windows 11 to protect users from various emerging threats and attacks. The new Windows 11 is secure by design and built-in requirements.

Microsoft says in Windows 11 announcement event:

“We have worked closely with our manufacturer and silicon partners to raise security baselines to meet the needs of the evolving threat landscape and the new world of hybrid work and learning.”

Also:

“The new set of hardware security requirements that comes with Windows 11 is designed to build a foundation that is even stronger and more resilient to attacks.”

Microsoft is making sure to improve the security baseline through built-in secure boot, hardware virtualization security features, Hypervisor-Protected Code Integrity, and much more security-based implementations in Windows 11.

David Weston, Microsoft’s Director of Enterprise and OS Security, stated that:

“This next generation of Windows will raise the security baseline by requiring more modern CPUs, with protections like virtualization-based security, hypervisor-protected code integrity and Secure Boot built-in and enabled by default to protect from both common malware, ransomware and more sophisticated attacks.”

Now, let’s have a look at how Windows 11 will have greater security features as compared to previous releases.

New Security Features in Windows 11

Here are the new security features that are incorporated in Windows 11:

1. Trusted Platform Module (TPM)
2. Support for Azure-based Microsoft Azure Attestation
3. New Security Innovations like Microsoft Pluton security processor
4. Secured-core PCs
5. Microsoft wants you to ditch passwords completely.

Let us discuss these in detail!

1] Trusted Platform Module (TPM)

Trusted Platform Module (TPM) is one of the most prominent security features in Windows 11. TPM is a chip that is used to secure confidential and sensitive data like encryption keys, user credentials, and more in the back of a hardware barrier. As attackers getting smarter and using advanced techniques to tamper data on your PC, this will help protect your PC against malware, ransomware, and other cyberattacks. TPM chip is added to the CPU individually or integrated into your computer’s motherboard.

Microsoft has made TPM a minimum requirement to run Windows 11. So, you can run Windows 11 only if your PC has built-in TPM chips. Although some high-end PCs use TPM chips. But, now it has become a necessity for using Windows 11 on your PC. Else, you won’t be able to upgrade to Windows 11.

To make it easier for users, TPM 2.0 chips will be integrated into all certified Windows 11 systems so that customers can take advantage of security backed by a hardware root of trust.

Read: How to use Windows Security in Windows 11 for the best protection.

2] Support for Azure-based Microsoft Azure Attestation

Azure-based Microsoft Azure Attestation (MAA) basically verifies the trustiness of multiple platforms before you access it. Windows 11 has out-of-the-box support for Azure-based Microsoft Azure Attestation. When customers access sensitive resources in the cloud, MAA enables Zero Trust policies to ensure that the platform is secure. Azure Attestation-backed policies verify both identity and platform helping organizations to safeguard organization resources.

Read: Why is my PC not compatible with Windows 11?

3] New Security Innovations like Microsoft Pluton security processor

Windows 11 will come with various new security innovations. These include hardware-enforced stack protection, Microsoft Pluton security processor, etc. This will ensure to protect users from zero-day exploits and also strengthen Zero Trust security. Zero Trust security approach basically ensures to verify everyone and everything that wants to access resources on a private network. This is another important security update in Windows 11.

Read: Windows 11 System Requirements.

4] Secured-core PCs

Secured-core PCs add an extra security layer beneath the OS by combining identity, virtualization-based security, operating system, and hardware and firmware protection. They are twice more resistant to malware infection and firmware attacks. And, they enable users to boot securely, be secure against firmware vulnerabilities, block unauthorized access, and more.

Read: Windows 11 Product Lifecycle and Servicing Update.

5] Microsoft wants you to ditch passwords

By default, the new Windows 11 devices will now be without passwords from day one. You won’t have to enter the password now to log in. With Windows Hello, Windows 11 is moving onto more strong authentication methods including Face lock, Fingerprint, Iris, and other biometrics. IT admins in enterprises can deploy Windows Hello for Business that involves granular control of authentication methods.

Windows 11 primarily focuses on hardware security requirements to mitigate various firmware attacks, zero-day exploits, malware infection, and other cyber attacks. All this new hardware security is compatible with forthcoming Pluton-equipped systems and devices using a TPM 2.0 security chip, including Dell, HP, Acer, ASUS, and many more. The above-discussed design and built-in features combined together add extra layers of security to Windows 11. The main aim of Microsoft this time is to improve productivity with an enhanced set of built-in security features.

Now read: Planning for Windows 11 Deployment?

Related posts

• Windows 11 til virksomheder og virksomheder - Nye funktioner

• Windows 11 Nye funktioner: Redesignet start, proceslinje, brugergrænseflade, snaplayout

• Hvordan fungerer funktionen Dynamic Refresh Rate i Windows 11

• Sådan aktiverer eller deaktiverer du Dynamic Refresh Rate (DRR) i Windows 11

• Sådan aktiverer og bruger du TPM Diagnostics Tool i Windows 11

• Sådan starter du Windows 11 i fejlsikret tilstand (8 måder) -

• Sådan skifter du til en lokal Windows 11-konto fra en Microsoft-konto

• Sådan pauser du Windows 11-opdateringer -

• Sådan installeres Windows 11 og Windows 10 på et USB-drev (Windows To Go)

• Sådan åbner du Task Manager i Windows 11 og Windows 10

• De 5 bedste nye funktioner i Windows 10's 1809-opdatering

• 6 måder at logge ud af Windows 11 -

• Liste over funktioner, der er forældet eller fjernet i Windows 11

• Sådan tjekker du hvilken version og udgave af Windows 11 du har

• Sådan nulstiller du Windows 11 uden at miste dine filer -

• Sådan aktiverer og bruger du Focus Sessions i Windows 11

• Hvor er papirkurven i Windows 10 og Windows 11?

• Sådan dualboot Windows 10 og Windows 11 -

• Sådan tilføjer og bruger du en VPN i Windows 11 -

• Hvorfor er min nye computer så langsom? 6 tips til at fremskynde Windows