Updated: July 11, 2020 (December 19, 2011)

  Charts & Illustrations

Safer Boot Features and Requirements

Michael Cherry by
Michael Cherry

Michael analyzed and wrote about Microsoft's operating systems, including the Windows client OS, as well as compliance and governance. Michael... more

Three changes to the Windows 8 boot process will make the process of starting Windows more secure, but whether a feature is available depends on the underlying firmware in the PC, the availability of signed drivers, and a Trusted Platform Module (TPM). For example, to use all three changes, the computer must have Unified Extensible Firmware Interface (UEFI)-based firmware, signed drivers, a Microsoft-signed antimalware driver, and a TPM. A computer with traditional BIOS-firmware and no TPM could still use the Early Load Antimalware (ELAM).

Feature UEFI-Firmware BIOS-Firmware Signed Drivers1 Microsoft-Signed Driver Trusted Platform Module
UEFI Secure Boot Required Not Supported Required Not Required Not Required
Early Load Antimalware Not Required Not Required Not Required Yes Not Required
Measured Boot Not Required Not Required Not Required Not Required Required

Atlas Members have full access

Get access to this and thousands of other unbiased analyses, roadmaps, decision kits, infographics, reference guides, and more, all included with membership. Comprehensive access to the most in-depth and unbiased expertise for Microsoft enterprise decision-making is waiting.

Membership Options

Already have an account? Login Now