Windows 10 Device Security Message

[BojPet]

Hi there guys!

Today i got a message from windows, that my PC does not meet the default hardware security. I have no idea what that means but i guess it has something to do with secure boot and the TPM stuff?

 

I attached a screenshot of what it shows me there. I there any BIOS-Stuff i need to enable? (Spec list below)
 

GPU: RTX 3090FE

Mainboard: MSI x570 Gaming Pro Carbon WiFi

RAM: 2x16GB CL14 3600MHz TridentZ Neo

CPU: Ryzen 9 5900X

Case: Fractal Design Define R6

CPU Cooler: Arctic Liquid Freezer II 360 Rev4

PSU: BeQuiet! Straight Power 11 1000W 80+ Gold

[ET_Explorer]

So what does the messages say, I don't understand german?

[BojPet]

2 hours ago, ET_Explorer said:

So what does the messages say, I don't understand german?

 

5 hours ago, BojPet said:

that my PC does not meet the default hardware security

I wrote it right there.

[markwoll]

Did you do a bios update? Do you have bitlocker enabled?

On a couple of occasions I have had a security message after a bios update if I didn't suspend bitlocker.

[GoodBytes]

9 hours ago, BojPet said:

Hi there guys!

Today i got a message from windows, that my PC does not meet the default hardware security. I have no idea what that means but i guess it has something to do with secure boot and the TPM stuff?

That is correct. You need to have TPM enabled and Secure Boot.

 

[BojPet]

17 hours ago, markwoll said:

Did you do a bios update? Do you have bitlocker enabled?

On a couple of occasions I have had a security message after a bios update if I didn't suspend bitlocker.

I did not make any BIOS Updates. Bitlocker is not on, i have Win10 Home.

[BojPet]

16 hours ago, GoodBytes said:

That is correct. You need to have TPM enabled and Secure Boot.

 

Both is enabled and recognized by Windows. That is what the two green checkmarks in the picture confirm.

On the Windows support page, it lists

Your device meets the requirements for standard hardware security

This means your device supports memory integrity and core isolation and also has:

• TPM 2.0 (also referred to as your security processor)

• Secure boot enabled

• DEP

• UEFI MAT

TPM 2.0 is confirmed to work and Secure Boot as well. The other two i have no idea what they are. I managed to find out what DEP seems to be and Windows reports it as working as well. My BIOS is running in UEFI but i did not find what MAT means or how to enable it.

 

The Link to the MS-Support Page:
https://support.microsoft.com/en-gb/windows/device-protection-in-windows-security-afa11526-de57-b1c5-599f-3a4c6a61c5e2