Out-of-the Box Built-in PC Security
Intel® Hardware Shield on Intel vPro® provides the most comprehensive security for your business.1
As the number, complexity, and severity of cyberattacks continue to rise, it helps protect and defend against modern threats with defense in depth at each layer: Hardware, BIOS/firmware, hypervisor, VMs, OS, and applications.
Below-the-OS Security from Attacks at the Firmware and Hardware Levels
A PC powered by Intel vPro® Enterprise for Windows includes the unique capabilities of Intel® Hardware Shield built-in to deliver one of the highest levels of hardware, software, and data protection right out of the box.
- Aimed at minimize the risk of malware injection by using Intel® Hardware Shield to lock down memory in the BIOS when software is running and help prevent planted malware from compromising the OS.
- Help ensure your OS boots securely with Intel® Hardware Shield that offers many hardware-based security capabilities that support a secure boot, allowing your PCs to launch into a trusted state.
Extend Protections of Your Applications and Data with Hardware-Accelerated Virtualization and Encryption
Enable hardware-based virtualization to help protect user access credentials, workspaces, applications, and data in hardened enclaves.
- Run virtual machines for security-based isolation with application compatibility across different operating systems running on the same PC with the many capabilities featured in Intel® Hardware Shield.
- Accelerate virtualized security software like Windows Defender Credential Guard and Application Guard with Intel virtualization capabilities to help protect against OS kernel-level malware and browser-based attacks.
- Complement virtualization with hardware-based encryption to help protect data at every layer.
Help Detect and Respond to Advanced Threats
Mitigate extreme attacks like control-flow hijacking, ransomware, and crypto mining.
- Software developers like Microsoft use Intel® Control-Flow Enforcement Technology (Intel® CET) to help defend against attacks on system memory.
- Defend against ransomware and malicious crypto mining with Intel® Threat Detection Technology (Intel® TDT). Hardware-based threat detection designed to detect the latest threats such as crypto mining and ransomware with minimal impact on performance.
Expand Protections
Intel® Hardware Shield reinforces virtualization-based security (VBS) with hardware-based security features to help protect computers at runtime. In addition, the below-the-operating system capabilities support a secure boot, allowing systems to launch into a trusted state.
Minimize Risks
Intel® Hardware Shield helps minimize the risk of malware injection by locking down memory in the BIOS when software is running to help prevent planted malware from compromising the operating system.
Increase Visibility
DRTM, also known as the dynamic root of trust for measurement, is a built-in feature of Intel® Hardware Shield that helps ensure that operating systems are running on legitimate hardware and provides hardware-to-software security visibility, all while helping protect your systems against malware. With added visibility into firmware security measures, businesses can more accurately assess the security of their systems.
Not All Hardware Security Capabilities Are Created Equally
Before you make your next PC purchase, be sure to take a deeper look.
Working with Microsoft and OEMs to Address the New Threat Landscape
Intel, Microsoft, and OEM partners are developing a new class of more secure PCs. These “Secured-core PCs”—designed with deep hardware-software integration and the Intel vPro® platform—are built to handle mission-critical data in some of the most data-sensitive industries.
A Secured-core PC is a modern Windows device powered by Intel vPro® that comes with the one of the highest levels of hardware, software, and identity protection features, right out of the box. Intel® Hardware Shield, exclusive to Intel vPro® on Windows PCs, helps provide protections against attacks at the firmware level. It helps minimize the risk of malware injection by locking down firmware when software is running to help prevent planted malware from compromising the OS.
Helps Ensure You Can Trust Newly Received Client Systems
You can rely on your supply chain with the Intel® Trusted Device Setup (Intel® TDS) stamp of OEM attestation.
- Help verify that new PCs have not been tampered with since leaving manufacturing, before corporate security software is installed—even when shipped directly to end users working from home.
- The Intel® TDS OEM remote health attestation service delivers a signed health report and a digital seal that captures events that could pose a security risk, if the device has been tampered with.
- Determine if the PC has been tampered with by detecting chassis intrusion, changes made to the firmware or to BIOS configuration, storage drive replacement, boot while in transit or other changes that break the digital seal.
Built to Move Business Forward
PCs powered by Intel vPro® Enterprise for Windows are built for business. With forward-looking features designed to help you confidently navigate the future of security and empower your team to connect and collaborate more seamlessly. Intel vPro® moves business forward to keep you agile, allow you to scale, and help you realize your goals fast. Anything is possible when you are equipped to do it all.
Complete Management
Save time and help reduce on-site support costs with remote discovery and recovery with Intel® Active Management Technology–even in cases of power loss or OS failure.
Learn more about Intel® Active Management Technology Intel® Endpoint Management Assistant
Reliable Stability
Intel® Stable IT Platform Program (Intel® SIPP) enables a predictable transition from one technology generation to the next.
Learn more about Intel® Stable IT Platform Program (Intel® SIPP)
Additional Content
Legal Disclosures2 3
Información sobre productos y desempeño
Todas las versiones de la plataforma Intel vPro® requieren un procesador Intel® Core™ que reúna las condiciones necesarias, un sistema operativo compatible, un chip Intel LAN o WLAN, mejoras de firmware y el hardware y el software necesarios para ofrecer los casos de uso de capacidad de administración, las características de seguridad, el desempeño del sistema y la estabilidad que definen la plataforma. Consulta intel.com/performance-vpro para obtener más información.
Los resultados de desempeño se basan en pruebas realizadas en las fechas indicadas en las configuraciones y es posible que no reflejen todas las actualizaciones públicamente disponibles. Consulte las copias de seguridad para conocer los detalles de la configuración. Más información en www.Intel.com/PerformanceIndex.
© Intel Corporation. Intel, el logotipo Intel y otras marcas Intel son marcas comerciales de Intel Corporation o sus filiales. Otros nombres y marcas podrían ser reclamados como propiedad de terceros.