Hacker News new | ask | show | jobs
by mkopec 495 days ago
> Does TPM support/requirements actually have any meaningful impact on a home user?

Disk encryption, Windows Hello and PIN bruteforce prevention. I have no love Microsoft and avoid using Windows whenever I can, but I think making those features accessible to more people is a good thing.

2 comments

VBS also requires it, which is a big improvement to Windows' security.

https://learn.microsoft.com/en-us/windows-hardware/design/de...

But Hyper-V is also a Windows 11 Pro feature (I get that it can be enabled on Home).
That isn't the virtualization VBS is referring to. Hyper-V is a separate feature from VBS. More context:

https://techcommunity.microsoft.com/blog/virtualization/virt...

I was under the impression that Bitlocker wasn't available on Windows Home?

If you have an older computer, without TPM 1.2/2.0, then you already don't things like Windows Hello, but you might have secure boot and some brute force prevention, so you wouldn't be worse of as a home user if Microsoft allowed you to run Windows 11.

For new computers I can completely understand that Microsoft would demand that vendors ship systems with TPM 2.0. For upgrades I just struggle to see any really compelling reason, it's not like Apple where Microsoft is trying to also sell hardware, that's mostly on the OEMs.

As of Windows 11, you can use Bitlocker on Windows Home.

(Personally I think you probably shouldn't bother with it unless you set a boot PIN, which still requires Pro to be allowed to change the right group policy settings.)