refreshed graphics

windows/security/book/hardware-security-hardware-root-of-trust.md

@@ -7,6 +7,8 @@ ms.date: 04/09/2024
 
 # Hardware root-of-trust
 
+:::image type="content" source="images/hardware.png" alt-text="Diagram of containing a list of security features." lightbox="images/hardware.png" border="false":::
+
 ## Trusted Platform Module (TPM)
 
 Trusted Platform Module (TPM) technology is designed to provide hardware-based, security-related functions. TPMs provide security and privacy benefits for system hardware, platform owners, and users. Windows Hello, BitLocker, System Guard (previously called Windows Defender System Guard), and other Windows features rely on the TPM for capabilities such as key generation, secure storage, encryption, boot integrity measurements, and attestation. These capabilities in turn help organizations strengthen the protection of their identities and data. The 2.0 version of TPM includes support for newer algorithms, which provides improvements like support for stronger cryptography. To upgrade to Windows 11, existing Windows 10 devices much meet minimum system requirements for CPU, RAM, storage, firmware, TPM, and more. All new Windows 11 devices come with TPM 2.0 built in. With Windows 11, both new and upgraded devices must have TPM 2.0. The requirement strengthens the security posture across all Windows 11 devices and helps ensure that these devices can benefit from future security capabilities that depend on a hardware root-of-trust.

windows/security/book/hardware-security-silicon-assisted-security.md

@@ -7,6 +7,8 @@ ms.date: 04/09/2024
 
 # Silicon assisted security
 
+:::image type="content" source="images/hardware.png" alt-text="Diagram of containing a list of security features." lightbox="images/hardware.png" border="false":::
+
 In addition to a modern hardware root-of-trust, there are numerous other capabilities in the latest chips that harden the operating system against threats by protecting the boot process, safeguarding the integrity of memory, isolating security-sensitive compute logic, and more.
 
 ## Secured kernel

windows/security/book/identity-protection-advanced-credential-protection.md

@@ -7,6 +7,8 @@ ms.date: 04/09/2024
 
 # Advanced credential protection
 
+:::image type="content" source="images/identity-protection.png" alt-text="Diagram of containing a list of security features." lightbox="images/identity-protection.png" border="false":::
+
 In addition to adopting passwordless sign-in, organizations can strengthen security for user and domain credentials in Windows 11 with Credential Guard and Remote Credential Guard. **Enhanced phishing protection with Microsoft Defender SmartScreen**
 
 As malware protection and other safeguards evolve, cybercriminals look for new ways to circumvent security measures. Phishing has emerged as a leading threat, with apps and websites designed to steal credentials by tricking people into voluntarily entering passwords. As a result, many organizations are transitioning to the ease and security of passwordless sign-in with Windows Hello or Windows Hello for Business.

windows/security/book/identity-protection-passwordless-sign-in.md

@@ -7,6 +7,8 @@ ms.date: 04/09/2024
 
 # Passwordless sign-in
 
+:::image type="content" source="images/identity-protection.png" alt-text="Diagram of containing a list of security features." lightbox="images/identity-protection.png" border="false":::
+
 Passwords are inconvenient to use and prime targets for cybercriminals—and they've been an important part of digital security for years. That changes with the passwordless protection available with Windows 11. After a secure authorization process, credentials are protected behind layers of hardware and software security, giving users secure, passwordless access to their apps and cloud services.
 
 ## Windows Hello

windows/security/book/index.md

@@ -3,6 +3,7 @@ title: Windows security book introduction
 description: Windows security book introduction
 ms.topic: overview
 ms.date: 04/09/2024
+ROBOTS: 
 ---
 
 # Windows 11 Security Book