Thanks to Windows 11, Scalpers Buy Out Add-on TPM 2.0 Modules

[Athlonite]

I don't have Secure Boot enabled on my motherboard and the compatibility checking tool says that my system can be upgraded to Windows 11 just fine.

As for why I don't have Secure Boot enabled, I have no idea how to enable it on my motherboard. I tried to enable it in UEFI but it gave me some cryptic message about it not being able to be enabled and that's when I said, 'fuck it' and went on my merry way.

there's two things you need to do to enable Secure Boot
1: Turn it on in your UEFI/BIOS settings
2: Make sure your Boot Drive is using a GPT partition type not the old MBR type

 

[Easo]

Do you have a link where you read this?


No, not fully. But a good firewall is a solid method of defense. Discounting the value of one is a fools errand.

As I said, properly configured firewall. A good and properly configured browser is important. However a good computing ethic is important too.

What I meant is security in layers/defense in depth/call it whatever you want. Firewall is just one thing out of many. This hardware level security push by Microsoft is another (and MS are not the only ones doing it, it starts from CPU manufacturers themselves). And really, trusting users with this is pointless. Any work in customer service, not just IT, should already tell you everything you need to know how failed such an attempt would be.

 

[Hachi_Roku256563]

Upgraded my AMD 3800X to windows 11 all good ,also did my 4790k with Z79X MB AND A 3570K all ugraded from w10 pro.

How to get beta builds

 

[R-T-B]

I don't have Secure Boot enabled on my motherboard and the compatibility checking tool says that my system can be upgraded to Windows 11 just fine.

As for why I don't have Secure Boot enabled, I have no idea how to enable it on my motherboard. I tried to enable it in UEFI but it gave me some cryptic message about it not being able to be enabled and that's when I said, 'fuck it' and went on my merry way.

If I turn it off I get a failure in the compatability tool.

This hardware level security push by Microsoft is another (and MS are not the only ones doing it, it starts from CPU manufacturers themselves).

This is true but it's still a really flawed model. It just gives malware an avenue to become persistent across reinstalls.

 

[Makaveli]

How to get beta builds

The insider build doesn't get released until this week or next to that is probably the leaked iso.

 

[Arcdar]

It's funny and sad that MS tries to block still absolutely fine hardware "just because" .... I've got two machines up and running which don't really need
any upgrade for what they are needed for (some office work and light gaming) - one of them is a dual x79 with two 2900v1's and the other one is a
dual x99 board with two 2698v3 .....

both of them do more than just fine for gaming and work. But neither of the two boards has the option to include a TPM (1.2 or 2) module sadly ....
and even if they would, they are not on the list of supported CPU's and thus even with tpm2.0 they wouldn't be "eligible to use Windows11" ...





Also, my Microsoft Surface Book (v1.0) with it's tpm1.2 module is NOT supported for windows11 .... and as far as I read nearly 50% of all MS "in-house-
products" are not compatible with windows 11...... yeah. awesome. That's why I got a MS "laptop" ............ to be locked out of future windows versions....
amazing.....

 

[trparky]

there's two things you need to do to enable Secure Boot
1: Turn it on in your UEFI/BIOS settings
2: Make sure your Boot Drive is using a GPT partition type not the old MBR type

I get something mentioning something about hardware keys when I try and turn it on and something called user mode in UEFI.

 

[Athlonite]

I get something mentioning something about hardware keys when I try and turn it on and something called user mode in UEFI.

Well that's weird could that be any more cryptic oh wait yes it could Hmmm I'd be looking at things CSM if it's on turn it off

 

[trparky]

Well that's weird could that be any more cryptic oh wait yes it could Hmmm I'd be looking at things CSM if it's on turn it off

I can't remember exactly what it said, I'd have to go back into UEFI but I have a long-running process that's going on that I can't interrupt at this time. I can't reboot the system to go into UEFI right now. Maybe I'll make a thread in the Motherboard forum about this when I can.

 

[totalfreq]

That just made me laugh..


Simple: NoScript(or disabling JS). However, and I KNOW I've said this in other treads, Spectre/Meltdown attack CAN NOT SUCCEED REMOTELY! Physical presence is REQUIRED.

I'm not going into a dissertation on how and why that is easily protected from.

You seem to be taking this to an extreme NO ONE will ever face.

Protecting ones self on the internet is somewhat involved, it's not rocket science.

Quit with your sad flame baiting.

Spectre may require local access but there are ways to remotely access the MEBx. And do so proir to bios password or bitlocker.

Im not going to outline all the details as it is still a wide spread problem. A critical update went out Sept 2020 patching the AMT/ISM system that you should apply immediately if you have not. But most OEMs still use the default MEBx password, and if PXE boot, AMT with Wifi, windows remote management or a whole slew of other settingsl could leave your MEBx exposed and remotely accessible. Furthermore a lot of OEMs havnt changed the MEBx password from default, or they have a universal password that can found easily on a google search.

Im not saying that every machjne is vulnerable, but alk ot takes is one of the above to be enabled and not secured properly and MEBx will be accessible remotely, bypassing Bios password lock, bitlocker, etc.

Im personally going to clip one tpm pin at a time (i think there are 20) to see which one windiws accepts as active/installed, but then doesnt actually work

 

[lexluthermiester]

What I meant is security in layers/defense in depth/call it whatever you want. Firewall is just one thing out of many. This hardware level security push by Microsoft is another (and MS are not the only ones doing it, it starts from CPU manufacturers themselves). And really, trusting users with this is pointless. Any work in customer service, not just IT, should already tell you everything you need to know how failed such an attempt would be.

There are so many things wrong with that statement...

The insider build doesn't get released until this week or next to that is probably the leaked iso.

It's out now apparently..

 

[totalfreq]

There are so many things wrong with that statement...


It's out now apparently..

Yep win 11 preview is available. Its not yet in my action pack but build 22000.51 is available as a preview.

 

[lexluthermiester]

Yep win 11 preview is available. Its not yet in my action pack but build 22000.51 is available as a preview.

Someone reviewed it:

Thanks to @rk3066 for the link over in the GN thread..

 

[windwhirl]

Update on Windows 11 minimum system requirements

Windows Insiders, Today we’re releasing our first Insider build for Windows 11, and we’re looking forward to the insight that comes from you installing and using on a variety of your PCs. Last week’s

blogs.windows.com

Microsoft's blog post about the requirements.

Main takeaways (may read like PR, take what you will from this):

On TPM, SecureBoot, etc.:

Windows 11 raises the bar for security by requiring hardware that can enable protections like Windows Hello, Device Encryption, virtualization-based security (VBS), hypervisor-protected code integrity (HVCI) and Secure Boot. The combination of these features has been shown to reduce malware by 60% on tested devices. To meet the principle, all Windows 11 supported CPUs have an embedded TPM, support secure boot, and support VBS and specific VBS capabilities.

On their decision of supporting only 8th gen Intel and Zen+ AMD CPUs and newer:

Devices upgraded to Windows 11 will be in a supported and reliable state. By choosing CPUs that have adopted the new Windows Driver model and are supported by our OEM and silicon partners who are achieving a 99.8% crash free experience.

They might review that decision to support the previous generation to those (no promises though)

As we release to Windows Insiders and partner with our OEMs, we will test to identify devices running on Intel 7th generation and AMD Zen 1 that may meet our principles. We’re committed to sharing updates with you on the results of our testing over time, as well as sharing additional technical blogs.

Acknowledging their PC Health check app was kinda a confusing mess:

the PC Health Check app was intended to help people check if their current Windows 10 PC could upgrade to Windows 11. Based on the feedback so far, we acknowledge that it was not fully prepared to share the level of detail or accuracy you expected from us on why a Windows 10 PC doesn’t meet upgrade requirements. We are temporarily removing the app so that our teams can address the feedback. We will get it back online in preparation for general availability this fall. In the meantime, you can visit our minimum system requirements page here to learn more.

 

[Makaveli]

Someone reviewed it:

Thanks to @rk3066 for the link over in the GN thread..

review here also.

Windows 11 Preview Hands-On: Much Ado About Menus

Windows 11 looks fresh, but often prioritizes form over function.

www.tomshardware.com

 

[Chrispy_]

this is hilarious

TPM modules are not hard to manufacture and their scarcity is dictated mostly by their uselessness so these scalpers will most likely only help retailers clear out old junk. specially when microsoft walks this back as they surely will

I honestly find this super amusing

The same thing could be said about desktop webcams 18 months ago.
Nobody had a need to buy one until they suddenly did, and it took 6 months of scalping before supply overtook demand to bring the prices down again.

 

[windwhirl]

The same thing could be said about desktop webcams 18 months ago.
Nobody had a need to buy one until they suddenly did, and it took 6 months of scalping before supply overtook demand to bring the prices down again.

Not like it matters much in this case. With TPM being built in CPUs, there's no need to get a discrete one.

 

[Chrispy_]

Not like it matters much in this case. With TPM being built in CPUs, there's no need to get a discrete one.

I think there are going to be a bunch of people using CPUs that predate integrated TPM. You only have to look at how many people are still on 7 and even XP still has significant marketshare despite being out of support for 12 years at this point.

 

[windwhirl]

I think there are going to be a bunch of people using CPUs that predate integrated TPM.

Nah, if Microsoft holds their position, all the supported CPUs have a TPM integrated.
Actually, I'm gonna check on that.

Well, after a while of searching, it's not completely clear, but it seems Intel's PTT (which is a TPM implementation) was introduced in some Haswell chips, and later brought into the rest of their CPUs in their sixth generation (so Skylake). Though others say that it was introduced in all Haswell and later chips, so it's not completely sure.

Funny thing, though, Intel Macs will not be able to dual boot to Windows 11, as they do not support TPM.

 

[Adam Krazispeed]

Greedy Scalpers are the bane of humanity...

you got that right... im sick of the scalpers and MS can go and die for all i care.. GAMING IS GOING TO HELL ON PC.. im about done thanks to scalpers ( mainly on CPUs and Graphics Cards. Ram and SSDs (nvme especially) the good ones

but so does first gen 1000 series ryzen and Threadripper, A,B,&X 300 + X399 Threadripper 1st gen ryzen has TPM2.0 because iv always turned it on in the bios, so wtf Zen1 Unsupported>> WHY MS?

 

[lexluthermiester]

you got that right... im sick of the scalpers, and MS can go and die for all i care.. GAMING IS GOING TO HELL ON PC.. im about done thanks to scalpers ( mainly on CPUs and Graphics Cards. Ram and SSDs (nvme especially) the good ones

but so does first gen 1000 series ryzen and Threadripper, A,B,&X 300 + X399 Threadripper 1st gen ryzen has TPM2.0 because iv always turned it on in the bios, so wtf Zen1 Unsupported>> WHY MS?

We feel your frustration. You're not alone. However, your missing something. It's called customizing your installation media. It's been a thing for decades, works on 11 now and will be a thing when 11 is released. The enthusiast & power user community will NOT be tolerating microsoft's nonsense. I've been customizing Windows installs since XP. Look into it.

BTW, folks, MJD just reviewed the newest build, 22000.51. Looks interesting;

 

[Chrispy_]

Funny thing, though, Intel Macs will not be able to dual boot to Windows 11, as they do not support TPM.

That's okay, Windows 11 looks like an OSX clone so there's no point in dual-booting any more....
/s

 

[lexluthermiester]

That's okay, Windows 11 looks like an OSX clone so there's no point in dual-booting any more....
/s

Try using it.

 

[Mussels]

Try using it.

Just did. Seems like W10, but easier on the eyes.
Only thing i dislike is that i gotta right click the windows button for task manager, instead of the task bar

 

[Chrispy_]

Try using it.

I have. Hence the /s
It's not really anything like OSX, just that first impressions, colourscheme and centralised dock are such blatant copies