Microsoft Removes Pluton TPM Support From New AMD, Intel, and Qualcomm CPUs
Microsoft has confirmed that its Pluton security processor will no longer serve as the TPM 2.0 implementation on AMD, Intel, and Qualcomm processors released in 2026.
Instead, newer processors will rely on vendor-provided firmware TPM (fTPM) or discrete TPM hardware. However, Microsoft is not discontinuing Pluton, which will continue providing hardware-isolated security features on Windows devices.
Microsoft Pluton Will No Longer Function as TPM 2.0
Microsoft introduced Pluton as a security processor integrated directly into the system-on-chip (SoC) to protect sensitive information, including encryption keys and credentials.
One of its main capabilities was functioning as the system’s TPM 2.0, which Windows 11 requires for several security features.
According to Microsoft’s documentation, processors released in 2026 will instead use vendor-specific TPM implementations, including:
- Firmware TPM (fTPM) – A TPM implementation provided by the processor manufacturer.
- Intel Platform Trust Technology (PTT) – Intel’s firmware-based TPM implementation.
- Discrete TPM 2.0 – A dedicated hardware security chip where applicable.
Pluton will continue operating as a separate hardware-isolated security environment, but it will no longer serve as the system’s TPM on these newer processors.
Why Microsoft Pluton Matters for Windows 11 Security
Microsoft designed Pluton to improve protection against physical attacks by integrating security functions directly into the processor.
Traditional discrete TPM chips can communicate with the CPU through external interfaces, potentially exposing sensitive information to hardware attacks such as TPM bus sniffing.
Pluton’s integrated architecture helps reduce these risks by keeping sensitive security operations within the SoC.
Although Microsoft is removing its TPM functionality from newer processors, Pluton will continue providing hardware-level security protections.
Existing Windows Devices Will Remain Supported
Microsoft confirms that existing AMD and Qualcomm devices using processors released before 2026, with Pluton configured as their TPM, will continue receiving support and servicing.
The change only affects newer processor platforms and does not alter existing Pluton TPM implementations.
Microsoft has not explained why it decided to move TPM functionality away from Pluton or announced additional changes to the security processor.
In other news, Microsoft released an emergency .NET security update to address a critical Brotli vulnerability. The company also removed custom CSS layout options from Entra ID to reduce phishing risks and is testing Intel APX support in Windows 11 to improve CPU performance.
Via Neowin
Read our disclosure page to find out how can you help Windows Report sustain the editorial team. Read more
User forum
0 messages