windows-itpro-docs/windows/whats-new/trusted-platform-module.md

title, description, ms.assetid, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, author, redirect_url

title	description	ms.assetid	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	author	redirect_url
What's new in Trusted Platform Module (Windows 10)	This topic for the IT professional describes new features for the Trusted Platform Module (TPM) in Windows 10.	CE8BBC2A-EE2D-4DFA-958E-2A178F2E6C44	w10	explore	library	security, mobile	brianlic-msft	https://technet.microsoft.com/itpro/windows/keep-secure/trusted-platform-module-overview

What's new in Trusted Platform Module?

Applies to

• Windows 10
• Windows 10 Mobile
• Windows Server 2016

This topic for the IT professional describes new features for the Trusted Platform Module (TPM) in Windows 10.

New features in Windows 10, version 1511

• Key Storage Providers (KSPs) and srvcrypt support elliptical curve cryptography (ECC).

New features in Windows 10

The following sections describe the new and changed functionality in the TPM for Windows 10:

• Device health attestation
• Microsoft Passport support
• Device Guard support
• Credential Guard support

Device health attestation

Device health attestation enables enterprises to establish trust based on hardware and software components of a managed device. With device heath attestation, you can configure an MDM server to query a health attestation service that will allow or deny a managed device access to a secure resource. Some things that you can check on the device are:

• Is Data Execution Prevention supported and enabled?
• Is BitLocker Drive Encryption supported and enabled?
• Is SecureBoot supported and enabled?

Note

  The device must be running Windows 10 and it must support at least TPM 2.0.   Learn how to deploy and manage TPM within your organization.