From 0dfa585ba55f5a3ec0efcddcc042f4eca85167c0 Mon Sep 17 00:00:00 2001
From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com>
Date: Mon, 8 Apr 2024 09:15:06 -0400
Subject: [PATCH] base folder

---
 windows/configuration/assigned-access/xsd.md  |   4 +-
 windows/security/book/index.yml               | 156 ++++++++++++++++++
 windows/security/book/toc.yml                 |  17 ++
 .../licensing-and-edition-requirements.md     |   2 +-
 4 files changed, 176 insertions(+), 3 deletions(-)
 create mode 100644 windows/security/book/index.yml
 create mode 100644 windows/security/book/toc.yml

diff --git a/windows/configuration/assigned-access/xsd.md b/windows/configuration/assigned-access/xsd.md
index 89519a3862..209c3fb81d 100644
--- a/windows/configuration/assigned-access/xsd.md
+++ b/windows/configuration/assigned-access/xsd.md
@@ -2,7 +2,7 @@
 title: Assigned Access XML Schema Definition (XSD)
 description: Assigned Access XSD reference article.
 ms.topic: reference
-ms.date: 02/15/2024
+ms.date: 04/08/2024
 ---
 
 # Assigned Access XML Schema Definition (XSD)
@@ -232,7 +232,7 @@ Here's the Assigned Access XSD for the features added in Windows 11:
 
 ## Windows 11, version 21H2 additions
 
-Here's the Assigned Access XSD for the features added in Windows 10, version 21H2:
+Here's the Assigned Access XSD for the features added in Windows 11, version 21H2:
 
 ```xml
 <xs:schema
diff --git a/windows/security/book/index.yml b/windows/security/book/index.yml
new file mode 100644
index 0000000000..c58f326b04
--- /dev/null
+++ b/windows/security/book/index.yml
@@ -0,0 +1,156 @@
+### YamlMime:Landing
+
+title: Windows security book
+summary: Windows is designed with zero-trust principles at its core, offering powerful security from chip to cloud. As organizations embrace hybrid work environments, the need for robust security solutions becomes paramount. Windows integrates advanced hardware and software protection, ensuring data integrity and access control across devices. Learn about the different security features included in Windows.
+
+metadata:
+  ms.topic: landing-page
+  ms.collection:
+    - tier1
+    - essentials-navigation
+  author: paolomatarazzo
+  ms.author: paoloma
+  manager: aaroncz
+  ms.date: 03/12/2024
+
+# linkListType: architecture | concept | deploy | download | get-started | how-to-guide | tutorial | overview | quickstart | reference | sample | tutorial | video | whats-new
+
+landingContent:
+
+  - title: Learn about hardware security
+    linkLists:
+      - linkListType: overview
+        links:
+          - text: Trusted Platform Module (TPM)
+            url: /windows/security/hardware-security/tpm/trusted-platform-module-overview
+          - text: Microsoft Pluton
+            url: /windows/security/hardware-security/pluton/microsoft-pluton-security-processor
+          - text: Windows Defender System Guard
+            url: /windows-hardware/design/device-experiences/oem-vbs
+          - text: Virtualization-based security (VBS)
+            url: /windows/security/hardware-security/how-hardware-based-root-of-trust-helps-protect-windows
+          - text: Secured-core PC
+            url: /windows-hardware/design/device-experiences/oem-highly-secure-11
+
+  - title: Learn about OS security
+    linkLists:
+      - linkListType: overview
+        links:
+          - text: Trusted boot
+            url: /windows/security/operating-system-security
+          - text: Windows security settings
+            url: /windows/security/operating-system-security/system-security/windows-defender-security-center/windows-defender-security-center
+          - text: BitLocker
+            url: /windows/security/operating-system-security/data-protection/bitlocker/
+          - text: Personal Data Encryption (PDE)
+            url: /windows/security/operating-system-security/data-protection/personal-data-encryption
+          - text: Windows security baselines
+            url: /windows/security/operating-system-security/device-management/windows-security-configuration-framework/windows-security-baselines
+          - text: Microsoft Defender SmartScreen
+            url: /windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/
+          - text: Windows Firewall
+            url: /windows/security/operating-system-security/network-security/windows-firewall/
+      - linkListType: architecture
+        links:
+          - text: BitLocker planning guide
+            url: /windows/security/operating-system-security/data-protection/bitlocker/planning-guide
+      - linkListType: how-to-guide
+        links:
+          - text: Configure BitLocker
+            url: /windows/security/operating-system-security/data-protection/bitlocker/configure
+          - text: Configure PDE
+            url: /windows/security/operating-system-security/data-protection/personal-data-encryption/configure
+      - linkListType: whats-new
+        links:
+          - text: Hyper-V firewall
+            url: /windows/security/operating-system-security/network-security/windows-firewall/hyper-v-firewall
+
+  - title: Learn about identity protection
+    linkLists:
+      - linkListType: overview
+        links:
+          - text: Passwordless strategy
+            url: /windows/security/identity-protection/passwordless-strategy
+          - text: Windows Hello for Business
+            url: /windows/security/identity-protection/hello-for-business
+          - text: Windows passwordless experience
+            url: /windows/security/identity-protection/passwordless-experience
+          - text: Web sign-in for Windows
+            url: /windows/security/identity-protection/web-sign-in
+          - text: Passkeys
+            url: /windows/security/identity-protection/passkeys
+          - text: FIDO2 security keys
+            url: /azure/active-directory/authentication/howto-authentication-passwordless-security-key
+          - text: Enhanced phishing protection with SmartScreen
+            url: /windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/enhanced-phishing-protection
+      - linkListType: how-to-guide
+        links:
+          - text: Configure PIN reset
+            url: /windows/security/identity-protection/hello-for-business/pin-reset
+          - text: RDP sign-in with Windows Hello for Business
+            url: /windows/security/identity-protection/hello-for-business/rdp-sign-in
+      - linkListType: architecture
+        links:
+          - text: Plan a Windows Hello for Business deployment
+            url: /windows/security/identity-protection/hello-for-business/deploy/
+      - linkListType: deploy
+        links:
+          - text: Cloud Kerberos trust deployment guide
+            url: /windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust
+
+  - title: Learn about application security
+    linkLists:
+      - linkListType: overview
+        links:
+          - text: Windows Defender Application Control (WDAC)
+            url: /windows/security/application-security/application-control/windows-defender-application-control/
+          - text: User Account Control (UAC)
+            url: /windows/security/application-security/application-control/user-account-control
+          - text: Microsoft vulnerable driver blocklist
+            url: /windows/security/application-security/application-control/windows-defender-application-control/design/microsoft-recommended-driver-block-rules
+          - text: Microsoft Defender Application Guard (MDAG)
+            url: /windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview
+          - text: Windows Sandbox
+            url: /windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview
+      - linkListType: how-to-guide
+        links:
+          - text: Configure Windows Sandbox
+            url: /windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file
+
+  - title: Learn about security foundations
+    linkLists:
+      - linkListType: overview
+        links:
+          - text: Zero trust
+            url: /windows/security/security-foundations/zero-trust-windows-device-health
+          - text: FIPS 140 validation
+            url: /windows/security/security-foundations/certification/fips-140-validation
+          - text: Common Criteria Certifications
+            url: /windows/security/security-foundations/certification/windows-platform-common-criteria
+          - text: Microsoft Security Development Lifecycle (SDL)
+            url: /windows/security/security-foundations/msft-security-dev-lifecycle
+          - text: Microsoft Windows Insider Preview bounty program
+            url: https://www.microsoft.com/msrc/bounty-windows-insider-preview
+          - text: OneFuzz service
+            url: https://www.microsoft.com/security/blog/2020/09/15/microsoft-onefuzz-framework-open-source-developer-tool-fix-bugs/
+      - linkListType: whats-new
+        links:
+          - text: Completed FIPS validations - Windows 11
+            url: /windows/security/security-foundations/certification/validations/fips-140-windows11
+          - text: Completed CC certifications - Windows 11
+            url: /windows/security/security-foundations/certification/validations/cc-windows11
+
+  - title: Learn about cloud security
+    linkLists:
+      - linkListType: overview
+        links:
+          - text: Security baselines with Intune
+            url: /mem/intune/protect/security-baselines
+          - text: Windows Autopatch
+            url: /windows/deployment/windows-autopatch
+          - text: Windows Autopilot
+            url: /windows/deployment/windows-autopilot
+          - text: Universal Print
+            url: /universal-print
+          - text: Remote wipe
+            url: /windows/client-management/mdm/remotewipe-csp
\ No newline at end of file
diff --git a/windows/security/book/toc.yml b/windows/security/book/toc.yml
new file mode 100644
index 0000000000..b0de28a482
--- /dev/null
+++ b/windows/security/book/toc.yml
@@ -0,0 +1,17 @@
+items:
+- name: Introduction to Windows security
+  href: ../introduction.md
+- name: Security features licensing and edition requirements
+  href: ../licensing-and-edition-requirements.md
+- name: Security foundations
+  href: ../security-foundations/toc.yml
+- name: Hardware security
+  href: ../hardware-security/toc.yml
+- name: Operating system security
+  href: ../operating-system-security/toc.yml
+- name: Application security
+  href: ../application-security/toc.yml
+- name: Identity protection
+  href: ../identity-protection/toc.yml
+- name: Cloud security
+  href: ../cloud-security/toc.yml
\ No newline at end of file
diff --git a/windows/security/licensing-and-edition-requirements.md b/windows/security/licensing-and-edition-requirements.md
index 5514543d97..c937d0d9c6 100644
--- a/windows/security/licensing-and-edition-requirements.md
+++ b/windows/security/licensing-and-edition-requirements.md
@@ -19,7 +19,7 @@ Select one of the two tabs to learn about licensing requirements to use the secu
 
 [!INCLUDE [licensing-requirements](../../includes/licensing/_licensing-requirements.md)]
 
-#### [:::image type="icon" source="images/icons/subscription.svg" border="false"::: **Edition requirements**](#tab/edition)
+#### [:::image type="icon" source="images/icons/certificate.svg" border="false"::: **Edition requirements**](#tab/edition)
 
 [!INCLUDE [_edition-requirements](../../includes/licensing/_edition-requirements.md)]