diff --git a/windows/security/book/architecture.png b/windows/security/book/architecture.png new file mode 100644 index 0000000000..dd00cdc393 Binary files /dev/null and b/windows/security/book/architecture.png differ diff --git a/windows/security/book/hardware-security.md b/windows/security/book/hardware-security.md index 34c913718a..80c4c2b491 100644 --- a/windows/security/book/hardware-security.md +++ b/windows/security/book/hardware-security.md @@ -86,7 +86,7 @@ In Secured-core PCs, System Guard Secure Launch protects bootup with a technolog System Management Mode (SMM) isolation is an execution mode in x86-based processors that runs at a higher effective privilege than the hypervisor. SMM complements the protections provided by DRTM by helping to reduce the attack surface. Relying on capabilities provided by silicon providers like Intel and AMD, SMM isolation enforces policies that implement restrictions such as preventing SMM code from accessing OS memory. The SMM isolation policy is included as part of the DRTM measurements that can be sent to a verifier like Microsoft Azure Remote Attestation. -:::image type="content" source="image.png" alt-text="aas" lightbox="image.png"::: +:::image type="content" source="architecture.png" alt-text="aas" lightbox="architecture.png"::: Learn more: Dynamic Root of Trust measure and SMM isolation diff --git a/windows/security/book/image.png b/windows/security/book/image.png deleted file mode 100644 index 8f3f376b36..0000000000 Binary files a/windows/security/book/image.png and /dev/null differ