Microsoft has now announced that Windows 11 will be generally available on October 11, 2021. The release will come six years after Windows 10 launched, the longest stretch between releases in company history.
One of the goals with Windows 11 is to deal with all of the malicious threats that are largely due to the leaks at the NSA. Since then, the explosion in ransomware has resulted in a large number of corporate incursions. Today 75% of corporations have either need robbed of intellectual property or they have been hit with ransomware that holds the corporate hostage.
Windows 11 is still not super stable but it is improving rapidly. Most likely come the end of September with weekly updates the release will be assured.
Older desktop machines from about 2016 onward have the requisite TPM 2.0 capabilities. Older motherboard largely have a TPM header that can be populated. TPM hardware will become more available now that security requirements are higher.
AMD AM4 is positioned as Windows 10 with no support for earlier operating systems. Many tried to run Windows 7 on AM4 and driver support was very poor.
DDR5 systems are expected soon enough and they will be Windows 11 ready. It is likely the new motherboards will be hardened against malware even more than DDR4 machines.
The secure boot option is the main goal which on the MSI X570-A PRO can be enabled independently of the TPM feature with the CPU. Secure boot makes it secure to load Windows and activate the security tools before fully committing to transfer control to Windows. The goal is to stay ahead of ransomware and other malicious actors.
The TPM 2.0 is used to store certificates etc. The earlier TPM 1.2 can also store certificates but TPM 2.0 can store several more instances which is helpful for secure virtual machines. Certificates for Linux are used for websites bit these can be used with Windows and OS X with some additional steps.
Read the announcement here.