14 DAY TRIAL // Microsoft has recently rolled out its official standards for Windows 10 devices to be considered “highly secure,” as it provides guidelines to OEMs building PCs or laptops to receive this certification.
Some of the specifications are odd, to say the least, and surprisingly, one of Microsoft’s own devices doesn’t meet them, though it’s worth knowing that not being labeled as “highly secure” doesn’t mean a certain product isn’t secure.
According to Microsoft, highly-secure Windows 10 devices must be running Windows 10 Fall Creators Update and be powered by Intel 7th generation Processors (Intel i3/i5/i7/i9-7x), Core M3-7xxx and Xeon E3-xxxx and current Intel Atom, Celeron and Pentium Processors or AMD 7th generation processors (A Series Ax-9xxx, E-Series Ex-9xxx, FX-9xxx).
While this particular requirement limits the possibility of getting the certification only to latest-generation devices, it also means that Redmond’s own Surface Pro 4 (launched last year) isn’t a “highly secure” PC, as it’s powered by Intel’s 6th generation chips. And this kind of makes sense, given that it’s not a device that launched with the Windows 10 Fall Creators Update and is powered by previous-gen hardware.
8GB RAM or more required
Then, Microsoft says devices need to have at least 8 GB RAM, and again this is an odd requirement since having less than that doesn’t compromise security in any way.
Of course, there are also several other firmware requirements, such as UEFI Secure Boot enabled by default and Secure MOR revision 2, and devices launching with the Windows 10 Fall Creators Update need to have them to be able to receive the highly secure certification.
“This topic applies specifically and uniquely for Windows 10 version 1709, Fall Creators Update. Windows security features are enabled when you meet or exceed these standards and your device is able to provide a highly secure experience,” Microsoft explains.
The company also adds that Windows 10 S is an alternative version of the operating system that excels in terms of security, as it restricts app usage to the Windows Store and blocks the install of Win32 software that could represent a threat to stored data and user info.