Reply to thread

Message

<blockquote data-quote="Ohad" data-source="post: 812132" data-attributes="member: 79569">The docs for this feature (available since Dec 2018) seem to be <a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection#feedback" target="_blank">here</a>. If I&#039;m reading them correctly:<ol>
<li data-xf-list-type="ol">System Guard = Secure Launch = Firmware protection</li>
<li data-xf-list-type="ol">There is a very long list of requirements to enable it (table at the bottom), including Intel vPro 8th gen processor or later (or SD850 or later) and TPM2.</li>
</ol><a href="https://blogs.technet.microsoft.com/secguide/2019/01/25/issue-with-systemguard-launch-setting-in-windows-10-v1809-and-windows-server-2019/" target="_blank">This MSDN blog post</a>, written at Jan 2019, says: &quot;At the time of this blog post no devices have yet shipped that include hardware support for Secure Launch including all Microsoft Surface devices and any other OEM devices.&nbsp; The first devices with this support included are not expected to be available on the market until the 2nd quarter of calendar year 2019 &quot;</blockquote>

[QUOTE="Ohad, post: 812132, member: 79569"] The docs for this feature (available since Dec 2018) seem to be [URL='https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection#feedback']here[/URL]. If I'm reading them correctly: [LIST=1] [*][I]System Guard [/I]=[I] Secure Launch [/I]= [I]Firmware protection[/I] [*]There is a very long list of requirements to enable it (table at the bottom), including[B] Intel vPro 8th gen processor or later[/B] (or SD850 or later) and [B]TPM2[/B]. [/LIST] [URL='https://blogs.technet.microsoft.com/secguide/2019/01/25/issue-with-systemguard-launch-setting-in-windows-10-v1809-and-windows-server-2019/']This MSDN blog post[/URL], written at Jan 2019, says: "[B]At the time of this blog post no devices have yet shipped that include hardware support for Secure Launch[/B] including all Microsoft Surface devices and any other OEM devices. [B]The first devices with this support included are not expected to be available on the market until the 2nd quarter of calendar year 2019 [/B]" [/QUOTE]

Verification