A New Level of Built-in PC Security

Intel® Hardware Shield, now available on the 11th Gen Intel vPro® mobile platform, provides the highest performance and most comprehensive hardware-based security for business.1 2

Businesses face increasing numbers, types, complexity, and severity of cyberattacks. Intel® Hardware Shield, exclusive to the Intel vPro® platform, helps protect and defend against modern threats with defense in depth at each layer: hardware, BIOS/firmware, hypervisor, VMs, OS and applications.

Intel® Hardware Shield overview white paper

Below-the-OS Security from Attacks at the Firmware and Hardware Levels

A Windows 10 Enterprise-based Intel vPro platform offers the unique capabilities of Intel Hardware Shield built-in to deliver the highest level of hardware, software and data protection right out of the box.

  • Minimize the risk of malicious code injection by using Intel Hardware Shield to lock down memory in the BIOS when software is running and help prevent planted malware from compromising the OS.
  • Help ensure your OS boots securely with Intel Hardware Shield that offers many hardware-based security capabilities that support a secure boot, allowing your PCs to launch into a trusted state.

Extend Protections of Your Applications and Data with Hardware-Accelerated Virtualization and Encryption

Enable hardware-based virtualization to help protect user access credentials, workspaces, applications and data in hardened enclaves.

  • Run virtual machines for security-based isolation with application compatibility across different operating systems running on the same PC with the many capabilities featured in Intel Hardware Shield.
  • Accelerate virtualized security software like Windows Defender Credential Guard and Application Guard with Intel virtualization capabilities to help protect against OS kernel-level malware and browser-based attacks.
  • Complement virtualization with hardware-based encryption to help protect data at every layer.

Help Detect and Respond to Advanced Threats

Mitigate extreme attacks like control-flow hijacking, ransomware, and crypto mining.

  • Software developers like Microsoft use Intel® Control-Flow Enforcement Technology (Intel® CET), part of Intel Hardware Shield, to help defend against attacks on system memory.
  • Defend against ransomware and malicious crypto mining with Intel® Threat Detection Technology (Intel® TDT), part of Intel Hardware Shield. Hardware-based threat detection to detect the latest threats such as crypto mining and ransomware without an impact on performance.

Expand Protections

Intel® Hardware Shield reinforces virtualization-based security (VBS) with hardware-based security features to protect computers at runtime. In addition, the below-the-operating system capabilities support a secure boot, allowing systems to launch into a trusted state.

Minimize Risks

Intel® Hardware Shield helps minimize the risk of malicious code injection by locking down memory in the BIOS when software is running to help prevent planted malware from compromising the operating system.

Increase Visibility

DRTM, a built-in feature of Intel® Hardware Shield helps ensure that operating systems are running on legitimate hardware and provides hardware-to-software security visibility. With added visibility into firmware security measures, businesses can more accurately assess the security of their systems.

Hiện thêm Hiện ít hơn

Working with Microsoft and OEMs to Address the New Threat Landscape

Intel, Microsoft, and OEM partners are developing a new class of secure PCs. These “Secured-core PCs”—designed with deep hardware-software integration and the Intel vPro® platform—are built to handle mission-critical data in some of the most data-sensitive industries.

Secured-core PC is a modern Windows device powered by the Intel vPro® platform that comes with the highest level of hardware, software, and identity protection features, right out of the box. Intel® Hardware Shield, exclusive to the Intel vPro® platform, provides protections against attacks at the firmware level. It helps minimize the risk of malicious code injection by locking down firmware when software is running to help prevent planted malware from compromising the OS.

Learn more about Secured-core PC

Ensure You Can Trust Newly Received Client Systems

You can rely on your supply chain with the Intel® Trusted Device Setup (Intel® TDS) stamp of OEM attestation.

  • Verify that new PCs have not been tampered with since leaving manufacturing, before corporate security software is installed—even when shipped directly to end users working from home.
  • The Intel® TDS OEM remote health attestation service delivers a signed health report and a digital seal that captures events that could pose a security risk, if the device has been tampered with.
  • Determine if the PC has been tampered with by detecting chassis intrusion, changes made to the firmware or to BIOS configuration, storage drive replacement, boot while in transit or other changes that break the digital seal.

Built for Business Innovation

Transform computing endpoints into strategic corporate assets by selecting devices built on the Intel vPro® platform.

Learn more about the Intel vPro® platform

Simplify Remote Management

Save time and reduce on-site support costs with remote discovery and recovery with Intel® Active Management Technology – even in cases of power loss or OS failure.

Learn more about Intel® Active Management Technology

PC Lifecycle Management with Intel® Stable IT Platform Program (Intel® SIPP)

Intel® Stable IT Platform Program (Intel® SIPP) enables a predictable transition from one technology generation to the next.

Learn more about Intel® Stable IT Platform Program (Intel® SIPP)

Disclaimer

Intel® technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration. No product or component can be absolutely secure. Check with your system manufacturer or retailer or learn more at intel.com.

Thông tin Sản phẩm và Hiệu năng

1

Ở các thiết bị mỏng nhẹ, chạy Windows, được đo bằng thử nghiệm kể từ ngày 1 tháng 12 năm 2020 trên Intel® Core™ i7-1185G7 theo tiêu chuẩn ngành, thử nghiệm Hướng dẫn Sử dụng Đại diện và các tính năng độc đáo, bao gồm cả so với AMD Ryzen 7 Pro 4750U, trên 3 mục đích sử dụng chính: năng suất, sáng tạo và cộng tác cũng như nghiên cứu IOActive vào tháng 12 năm 2020 (do Intel ủy quyền) so sánh khả năng bảo mật của Intel® Hardware Shield với các công nghệ tương ứng trong AMD Ryzen Pro 4750U.

2

Để biết thêm về khối lượng công việc và cấu hình, hãy truy cập www.Intel.com/PerformanceIndex. Kết quả có thể khác nhau.