正文 · AI 翻译
IT Home reported on October 26 that technology outlet NeoWin published a post today (October 26) saying Microsoft had updated its support documentation to announce that, on next-generation AMD, Intel and Qualcomm platforms, the Pluton security coprocessor will no longer provide TPM 2.0 functionality. TPM functionality will instead be provided by a vendor firmware TPM or a discrete TPM.
IT Home notes: In Windows 11, Microsoft raised the hardware requirements, including a strict requirement that devices support Trusted Platform Module (TPM) 2.0.
A TPM usually takes the form of a discrete chip, a firmware module in the CPU, or a security coprocessor in a SoC. It has protected storage for keys, certificates, password hashes and measurements; even if the system is reinstalled or the hard drive is removed, data protected by the TPM is difficult to extract directly.
At the architectural level, Pluton is a security architecture led by Microsoft and implemented inside processors by chipmakers including AMD, Intel and Qualcomm. It integrates a security processor, protected storage and secure firmware directly into the SoC, with the aim of reducing opportunities for attackers to steal keys, credentials and system data through physical access or firmware attacks.
In its hardware implementation, Pluton moves key security capabilities inside the main processor, creating a stronger isolation boundary between the security CPU, key storage and cryptographic engine and the system’s main CPU, memory and external buses. This means keys need not travel across motherboard traces, reducing the attack surface.
Microsoft Pluton is currently available on devices running Windows 11 with the following chipsets:
AMD: Ryzen™ 6000, 7000, 8000, 9000 and Ryzen™ AI series processors
Intel®: Core™ series processors — Ultra 200V series, Ultra Series 3 and Series 3 processors
Qualcomm: Snapdragon® 8cx Gen 3 and Snapdragon® X series processors
Previously, one of Pluton’s major selling points was that it could serve directly as a TPM 2.0 and reduce the risk of attackers stealing data after gaining physical access to a device by using a more isolated hardware environment.
The report says Microsoft has adjusted the role of its Pluton security architecture on new hardware. According to Microsoft’s updated 2026 hardware guidance, Pluton will no longer serve as the system’s TPM 2.0 on next-generation chip platforms from AMD, Intel and Qualcomm.
TPM functionality will instead be handled by firmware TPM (fTPM) provided by processor manufacturers, such as Intel’s PTT, or by a discrete TPM chip on the motherboard.
Microsoft stressed that this change does not mean it is abandoning Pluton. Pluton will remain in current and future Windows devices and continue to provide a hardware-isolated security environment; this adjustment only removes its role as a TPM.
However, Microsoft has not explained why it made this change on new platforms, nor has it said whether the decision is related to compatibility, the supply chain, security strategy or how vendors implement the technology.