Trusted Boot Architecture with Secure Boot, AM Preloading, and Measured Boot

A new set of features, collectively called the Trusted Boot Architecture, or Platform Integrity Architecture, is being introduced with Windows Server 2012. These features do not require any action on behalf of the administrator but provide a significant improvement in protecting the server against malware, especially low-level threats such as rootkits and bootkits.

The following security features are now part of every Windows Server 2012 (and Windows 8 Client) installation:

Secure boot—The OS firmware will only boot using a signed trusted loader. The loader requires signature verification from later components. This additional check should target boot kits trying to ...

Get Windows Server® 2012 Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.