Today we're pleased to announce our newest Surface device built for the flexible workplace by powering productivity and enabling mobility with Surface's well-known design craftmanship, advanced security and performance to take on everyday tasks.
With Firmware Attack Surface Reduction (FASR), our first Intel-based Secured-core PC brings more hardware and software protection for users handling the most sensitive data in your organization.
Surface Laptop Go 2 ensures peace of mind for you and your team, no matter where, when, or how your employees are working.
Surface Laptop Go 2 is our first Intel-based Secured-core PC, designed to elevate the benefits of Windows 11 security, providing additional hardware and software protection for workers handling the most sensitive data in your organization. Secured-core PC is a special category of devices that enables an advanced set of protections across multiple layers of the device. One of the core value propositions of a Secured-core PC is to protect the hypervisor and operating system from firmware attacks. The overall security of any system is deeply rooted in the firmware since any vulnerabilities or exploits in firmware can result in the entire operating system being compromised.
The open source Project Mu UEFI firmware now supports new firmware protection capabilities that help reduce attack surfaces. It introduces a new approach to achieving the Secured-core promise around firmware protection.
To achieve this, we identified the smallest set of core firmware components required for booting the PC. Then we developed mechanisms to securely measure those components and attest to their authenticity to Windows in a tamper-resistant way. Carefully controlling the list of components allowed to execute in the FASR-certified boot path reduces the firmware attack surface. Windows can determine that only the expected firmware code is executed, and that code has not been tampered with. This approach leverages a root-of-trust upon boot to ensure the device only boots the anticipated firmware and version of Windows 11.
This is how Surface Laptop Go 2 meets Secured-core PC standards to protect the device all the way down to the firmware level. This, along with Surface's Chip to Cloud security, helps users get tasks done with peace of mind. To learn more, go to FASR
Surface plays a key role in Microsoft’s commitment to be carbon negative, water positive, and zero waste by 2030 3 which is why we aim to create devices that reduce carbon impact across their lifecycles, reduce waste, and are built with integrity.
Explore the new device here. Surface Laptop Go 2 for Business is available to order now
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.