Skip to content

Commit b54236d

Browse files
System Guard rebranding
1 parent cf80d46 commit b54236d

File tree

4 files changed

+12
-12
lines changed

4 files changed

+12
-12
lines changed

includes/licensing/windows-defender-system-guard.md renamed to includes/licensing/system-guard.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -7,13 +7,13 @@ ms.topic: include
77

88
## Windows edition and licensing requirements
99

10-
The following table lists the Windows editions that support Windows Defender System Guard:
10+
The following table lists the Windows editions that support System Guard:
1111

1212
|Windows Pro|Windows Enterprise|Windows Pro Education/SE|Windows Education|
1313
|:---:|:---:|:---:|:---:|
1414
|Yes|Yes|Yes|Yes|
1515

16-
Windows Defender System Guard license entitlements are granted by the following licenses:
16+
System Guard license entitlements are granted by the following licenses:
1717

1818
|Windows Pro/Pro Education/SE|Windows Enterprise E3|Windows Enterprise E5|Windows Education A3|Windows Education A5|
1919
|:---:|:---:|:---:|:---:|:---:|

windows/security/hardware-security/how-hardware-based-root-of-trust-helps-protect-windows.md

+10-10
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
11
---
2-
title: How Windows Defender System Guard helps protect Windows
3-
description: Learn how Windows Defender System Guard reorganizes the existing Windows system integrity features under one roof.
2+
title: How System Guard helps protect Windows
3+
description: Learn how System Guard reorganizes the existing Windows system integrity features under one roof.
44
ms.localizationpriority: medium
55
ms.date: 10/25/2023
66
ms.topic: conceptual
77
---
88

9-
# Windows Defender System Guard: How a hardware-based root of trust helps protect Windows
9+
# System Guard: How a hardware-based root of trust helps protect Windows
1010

1111
To protect critical resources such as the Windows authentication stack, single sign-on tokens, the Windows Hello biometric stack, and the Virtual Trusted Platform Module, a system's firmware and hardware must be trustworthy.
1212

13-
Windows Defender System Guard reorganizes the existing Windows system integrity features under one roof and sets up the next set of investments in Windows security. It's designed to make these security guarantees:
13+
System Guard reorganizes the existing Windows system integrity features under one roof and sets up the next set of investments in Windows security. It's designed to make these security guarantees:
1414

1515
- Protect and maintain the integrity of the system as it starts up
1616
- Validate that system integrity has truly been maintained through local and remote attestation
@@ -33,7 +33,7 @@ Also, a bug fix for UEFI code can take a long time to design, build, retest, val
3333

3434
### Secure Launch—the Dynamic Root of Trust for Measurement (DRTM)
3535

36-
[Windows Defender System Guard Secure Launch](system-guard-secure-launch-and-smm-protection.md), first introduced in Windows 10 version 1809, aims to alleviate these issues by leveraging a technology known as the Dynamic Root of Trust for Measurement (DRTM). DRTM lets the system freely boot into untrusted code initially, but shortly after launches the system into a trusted state by taking control of all CPUs and forcing them down a well-known and measured code path. This has the benefit of allowing untrusted early UEFI code to boot the system, but then being able to securely transition into a trusted and measured state.
36+
[System Guard Secure Launch](system-guard-secure-launch-and-smm-protection.md), first introduced in Windows 10 version 1809, aims to alleviate these issues by leveraging a technology known as the Dynamic Root of Trust for Measurement (DRTM). DRTM lets the system freely boot into untrusted code initially, but shortly after launches the system into a trusted state by taking control of all CPUs and forcing them down a well-known and measured code path. This has the benefit of allowing untrusted early UEFI code to boot the system, but then being able to securely transition into a trusted and measured state.
3737

3838
![System Guard Secure Launch.](images/system-guard-secure-launch.png)
3939

@@ -56,15 +56,15 @@ SMM protection is built on top of the Secure Launch technology and requires it t
5656

5757
## Validating platform integrity after Windows is running (run time)
5858

59-
While Windows Defender System Guard provides advanced protection that will help protect and maintain the integrity of the platform during boot and at run time, the reality is that we must apply an "assume breach" mentality to even our most sophisticated security technologies. We can trust that the technologies are successfully doing their jobs, but we also need the ability to verify that they were successful in achieving their goals. For platform integrity, we can't just trust the platform, which potentially could be compromised, to self-attest to its security state. So Windows Defender System Guard includes a series of technologies that enable remote analysis of the device's integrity.
59+
While System Guard provides advanced protection that will help protect and maintain the integrity of the platform during boot and at run time, the reality is that we must apply an "assume breach" mentality to even our most sophisticated security technologies. We can trust that the technologies are successfully doing their jobs, but we also need the ability to verify that they were successful in achieving their goals. For platform integrity, we can't just trust the platform, which potentially could be compromised, to self-attest to its security state. So System Guard includes a series of technologies that enable remote analysis of the device's integrity.
6060

61-
As Windows boots, a series of integrity measurements are taken by Windows Defender System Guard using the device's Trusted Platform Module 2.0 (TPM 2.0). System Guard Secure Launch doesn't support earlier TPM versions, such as TPM 1.2. This process and data are hardware-isolated away from Windows to help ensure that the measurement data isn't subject to the type of tampering that could happen if the platform was compromised. From here, the measurements can be used to determine the integrity of the device's firmware, hardware configuration state, and Windows boot-related components, to name a few.
61+
As Windows boots, a series of integrity measurements are taken by System Guard using the device's Trusted Platform Module 2.0 (TPM 2.0). System Guard Secure Launch doesn't support earlier TPM versions, such as TPM 1.2. This process and data are hardware-isolated away from Windows to help ensure that the measurement data isn't subject to the type of tampering that could happen if the platform was compromised. From here, the measurements can be used to determine the integrity of the device's firmware, hardware configuration state, and Windows boot-related components, to name a few.
6262

63-
![Boot time integrity.](images/windows-defender-system-guard-boot-time-integrity.png)
63+
![Boot time integrity.](images/system-guard-boot-time-integrity.png)
6464

65-
After the system boots, Windows Defender System Guard signs and seals these measurements using the TPM. Upon request, a management system like Intune or Microsoft Configuration Manager can acquire them for remote analysis. If Windows Defender System Guard indicates that the device lacks integrity, the management system can take a series of actions, such as denying the device access to resources.
65+
After the system boots, System Guard signs and seals these measurements using the TPM. Upon request, a management system like Intune or Microsoft Configuration Manager can acquire them for remote analysis. If System Guard indicates that the device lacks integrity, the management system can take a series of actions, such as denying the device access to resources.
6666

67-
[!INCLUDE [windows-defender-system-guard](../../../includes/licensing/windows-defender-system-guard.md)]
67+
[!INCLUDE [system-guard](../../../includes/licensing/system-guard.md)]
6868

6969
## System requirements for System Guard
7070

Loading

0 commit comments

Comments
 (0)