Out-of-the Box Built-in PC Security
Intel® Hardware Shield on Intel vPro®1 provides the most comprehensive security for your business.
As the number, complexity, and severity of cyberattacks continue to rise, it helps protect and defend against modern threats with defense in depth at each layer: Hardware, BIOS/firmware, hypervisor, VMs, OS, and applications.
Below-the-OS Security from Attacks at the Firmware and Hardware Levels
A PC powered by Intel vPro® Enterprise for Windows includes the unique capabilities of Intel® Hardware Shield built-in to deliver one of the highest levels of hardware, software, and data protection right out of the box.
- Aimed at minimize the risk of malware injection by using Intel® Hardware Shield to lock down memory in the BIOS when software is running and help prevent planted malware from compromising the OS.
- Help ensure your OS boots securely with Intel® Hardware Shield that offers many hardware-based security capabilities that support a secure boot, allowing your PCs to launch into a trusted state.
Extend Protections of Your Applications and Data with Hardware-Accelerated Virtualization and Encryption
Enable hardware-based virtualization to help protect user access credentials, workspaces, applications, and data in hardened enclaves.
- Run virtual machines for security-based isolation with application compatibility across different operating systems running on the same PC with the many capabilities featured in Intel® Hardware Shield.
- Accelerate virtualized security software like Windows Defender Credential Guard and Application Guard with Intel virtualization capabilities to help protect against OS kernel-level malware and browser-based attacks.
- Complement virtualization with hardware-based encryption to help protect data at every layer.
Help Detect and Respond to Advanced Threats
Mitigate extreme attacks like control-flow hijacking, ransomware, and crypto mining.
- Software developers like Microsoft use Intel® Control-Flow Enforcement Technology (Intel® CET) to help defend against attacks on system memory.
- Defend against ransomware and malicious crypto mining with Intel® Threat Detection Technology (Intel® TDT). Hardware-based threat detection designed to detect the latest threats such as crypto mining and ransomware with minimal impact on performance.
Expand Protections
Intel® Hardware Shield reinforces virtualization-based security (VBS) with hardware-based security features to help protect computers at runtime. In addition, the below-the-operating system capabilities support a secure boot, allowing systems to launch into a trusted state.
Minimize Risks
Intel® Hardware Shield helps minimize the risk of malware injection by locking down memory in the BIOS when software is running to help prevent planted malware from compromising the operating system.
Increase Visibility
DRTM, also known as the dynamic root of trust for measurement, is a built-in feature of Intel® Hardware Shield that helps ensure that operating systems are running on legitimate hardware and provides hardware-to-software security visibility, all while helping protect your systems against malware. With added visibility into firmware security measures, businesses can more accurately assess the security of their systems.
Not All Hardware Security Capabilities are Created Equally
Before you make your next PC purchase, be sure to take a deeper look.
Working with Microsoft and OEMs to Address the New Threat Landscape
Intel, Microsoft, and OEM partners are developing a new class of more secure PCs. These “Secured-core PCs”—designed with deep hardware-software integration and the Intel vPro® platform—are built to handle mission-critical data in some of the most data-sensitive industries.
A Secured-core PC is a modern Windows device powered by Intel vPro® that comes with the one of the highest levels of hardware, software, and identity protection features, right out of the box. Intel® Hardware Shield, exclusive to Intel vPro® on Windows PCs, helps provide protections against attacks at the firmware level. It helps minimize the risk of malware injection by locking down firmware when software is running to help prevent planted malware from compromising the OS.
Helps Ensure You Can Trust Newly Received Client Systems
You can rely on your supply chain with the Intel® Trusted Device Setup (Intel® TDS) stamp of OEM attestation.
- Help verify that new PCs have not been tampered with since leaving manufacturing, before corporate security software is installed—even when shipped directly to end users working from home.
- The Intel® TDS OEM remote health attestation service delivers a signed health report and a digital seal that captures events that could pose a security risk, if the device has been tampered with.
- Determine if the PC has been tampered with by detecting chassis intrusion, changes made to the firmware or to BIOS configuration, storage drive replacement, boot while in transit or other changes that break the digital seal.
Built to Move Business Forward
PCs powered by Intel vPro® Enterprise for Windows are built for business. With forward-looking features designed to help you confidently navigate the future of security and empower your team to connect and collaborate more seamlessly. Intel vPro® moves business forward to keep you agile, allow you to scale, and help you realize your goals fast. Anything is possible when you are equipped to do it all.
Complete Management
Save time and help reduce on-site support costs with remote discovery and recovery with Intel® Active Management Technology–even in cases of power loss or OS failure.
Learn more about Intel® Active Management Technology Intel® Endpoint Management Assistant
Reliable Stability
Intel® Stable IT Platform Program (Intel® SIPP) enables a predictable transition from one technology generation to the next.
Learn more about Intel® Stable IT Platform Program (Intel® SIPP)
Additional Content
Legal Disclosures 2 3
Informações de produto e desempenho
Todas as versões da plataforma Intel vPro® exigem um processador Intel® Core™ elegível, um sistema operacional compatível, LAN Intel® e/ou silício WLAN, aprimoramentos de firmware e outros hardware e software necessários para fornecer os casos de uso de gerenciabilidade, recursos de segurança, desempenho do sistema e estabilidade que definem a plataforma. Consulte intel.com/performance-vpro para obter mais detalhes.
Os resultados de desempenho são baseados em testes realizados nas datas especificadas nas configurações e podem não incluir todas as atualizações disponíveis publicamente. Consulte o fabricante para obter os detalhes de configuração. Saiba mais em www.Intel.com/PerformanceIndex.
© Intel Corporation. Intel, o logotipo Intel e outras marcas Intel são marcas registradas da Intel Corporation ou de suas subsidiárias. Outros nomes e marcas podem ser propriedade de outras empresas.