#raptoritnetwork

For the past few decades, as the digital revolution expands, more and more people are working from home than ever before. In fact, the percentage of American workers who did their jobs from home has been growing steadily since 2000, reaching an all-time high of 5 percent just last year. However, as we know, the year 2020 has prompted rapid growth in the number of people working from home as the COVID-19 pandemic has forced millions to abandon their offices and turn their dining rooms or spare bedrooms into workspaces. Yet even as some businesses start to open back up, including offices, many companies are electing to allow their workers to continue working from home at least through the rest of the year. This may still extend further even after the virus is successfully contained. Recent estimates indicate that around 20 percent of companies will make their pandemic work-from-home policies permanent, representing a significant change in how we work. For many, this is welcome news. But working from home comes with some risks, as your home network tends to be less well protected against cyber criminals than a corporate one. Implementing the right defenses is essential to keeping yourself and your company safe, and below, you can find out everything you need to make sure your home office is fully secure.

Cyber Security Threats in 2020

Before going into the specific things you can be doing to maximize your home office’s security, we wanted to discuss the various threats that are out there so that you can better understand why these measures are necessary and what they do. There are many different dangers out there, but the most prevalent include: Hacking and Data Theft Hacking just means that someone who does not have the authorization to access a system manages to get into it, which almost always leads to data theft. Hackers want things such as credit card numbers, bank information, login details, social security numbers, and anything else valuable they can get their hands on and then sell for a profit. The typical line of thinking is that hackers tend to go after larger companies as that’s where the useful data is (and also because they can get more information with one hack, increasing their efficiency). But these large companies also tend to have the strongest defenses, making them the most difficult to hack. As a result, small businesses are increasingly becoming the preferred target for hackers and other cybercriminals, mainly because their defenses tend to be weaker, yet they still hold valuable data. In fact, around 43 percent of all cyberattacks are aimed at small businesses. The logic is that it takes the same amount of effort to hack several small companies, and produces more results than trying and hack into a big company. If you thought you were safe because you work for a small company, “no one would bother to hack,” know that this is no longer the case, and you need to be taking cybersecurity as seriously as everyone else. Identity Theft Identity theft occurs when a cybercriminal assumes your identity and then does things on your behalf. In a worst-case scenario, they get a hold of your social security number and other personal details. They then use this information to withdraw money from your accounts, make charges to your credit and debit cards, and even open up new credit lines that could get you into real trouble with creditors. If you’re working from home, identity theft becomes even more of a concern because if your identity is stolen, cybercriminals may be able to gain access to your company’s servers, compromising its data and potentially costing a lot of money. Viruses, Malware, Ransomware, and Worms While all slightly different, these are all programs that make their way onto your computer, usually because you click a bad link or open a dangerous spam email. They do various things to your computer. For example, ransomware will literally hold your device “hostage,” shutting it down until you either hand over sensitive data or give money. Malware is more common and can often go undetected. It slows down your computer, and at best is a nuisance that can get in the way of your productivity. At worst, it can take personal information off your device and send it to people who will use it to steal from either you or your company. Cyberbullying Not typically thought of as a cyber threat, cyberbullying is quite prevalent in our society, and, contrary to popular belief, it’s not just something that kids do. A study by Pew found that around 40 percent of adults have experienced some sort of online harassment, and 75 percent of adults have reported seeing it taking place around them. If you’re new to working online, it’s essential to be aware of how you’re interacting with others. Comments or jokes that might have gone unnoticed, or were better contextualized, when spoken in the office, can seem aggressive or harmful when typed out in a message. Being aware of this is vital to protect yourself (cyberbullying is a crime, and even if you’re not convicted in a court of law, it can lead to termination) and those you work with. Both are important aspects of keeping your company moving forward.

The Reality of the Threats We Face

Now that you have an idea of the threats that are out there, here are some numbers that should help drive home just how serious this issue is and why it requires so much of your attention.

Whether you’re new to working online from home due to the pandemic, have been at it for a while, or plan to continue to do it moving forward, all of these numbers should be concerning. However, the last four are particularly troublesome. They point to the massive expense a cyber mistake can force your company to incur, and they also indicate that you, as an employee, are the one most likely to be responsible for such a mistake. Don’t let this strike fear into your heart. If you take the proper steps to protect yourself in your new home, then you can be sure that you won’t be the one who brings on this data breach that could have catastrophic consequences for not only yourself but also your employer.

11 Work at Home Security Tips

Now that you are aware of the threats that you face when working from home, as well as their prevalence and potentially catastrophic consequences, it’s time to look at what you can do to make sure your home office is secure. 1. Review Company “Work From Home” Policy When you begin to work from home, the very first thing you should do is review the company’s existing “work from home” policy. This should include all the information the experts have deemed necessary for you to know about the dangers you might face, and there should also be plenty of information about best practices you can use to make sure you’re safe. These policies will typically provide instructions about passwords, data sharing, access, authentication, and more. If you read through it and come across things that aren’t entirely clear, then make sure to speak up and ask for clarification; your entire company’s cybersecurity might be resting on it. A copy of this policy should be given to you once it has been established that you’ll be working remotely. If it’s not, ask for it. If it doesn’t exist, then you should speak with your manager about making one since a document like this is often essential to making sure employees are educated and informed about what they need to be doing. 2. Make Sure Everything is Password Protected Although they seem simple, passwords are a huge component of cybersecurity. They act as the first line of defense against potential hacks or other unwanted access attempts, and not using passwords is equivalent to leaving the front door of your house unlocked. Ignoring them means cybercriminals will be able to get past your first safeguard without much issue, significantly increasing the chances of a full-on hack and data breach. When we say password protect everything, we mean everything. This means your computer, laptop, smartphone, and all of your accounts. Make sure you’re mixing up the passwords you’re using, i.e., you’re not using the same one for multiple accounts, and that you are practicing good password habits, which include:

- Overall, setting passwords and following good habits is easy to do, but it is one of the most significant defenses you can use against hackers and other cybercriminals. 3. Lock Computers Not in Use One good habit to adopt is to make sure that you’re locking your computers when you’re not using them, especially those you’re using for work. This means either turning them off or using the lock feature found by pressing “CTL + ALT + Delete.” For those who have lots of experience working in an office, this is probably not something new, but it’s reasonable to think you don’t need to do this when you’re at home. Getting into this habit will ensure that you never leave your devices vulnerable to attacks from hackers and other cybercriminals. 4. Improve the Physical Security of Your Home Office Now that you’ve moved into a home office, you need to accept that there might be additional threats you didn’t face before, such as a break-in. Of course, we all don’t want to think this is possible, but there is no limit to what cybercriminals will do if they’re chasing after what they perceive to be valuable information. As a result, you will want to take some steps to ensure the security of your office. This includes making sure there is a working lock on the door, installing locks on desk drawers and filing cabinets, and making sure computer screens are not visible from the outside. Of course, if you live in a secluded area where there’s no chance someone sees inside your home, this last step might not be entirely necessary. Still, those living in bigger cities where there are more prying eyes would do well to ensure they’re working in privacy while in their home office. 5. Enable Two-Factor Authentication Two-factor authentication is a security feature offered by lots of companies and organizations providing online services. All it means is that you need to go through two identity verification stages to gain access to your account. Usually, this means entering your username and password and then providing a code that is sent to your phone or email (which you have provided) to confirm you are indeed the person you claim to be. This is particularly effective because while hackers might be able to get past your password if they are really savvy, it’s almost impossible for them to guess this second part, making it that much more difficult for them to get access to your account. It’s also a great way to detect when your account is under attack; if you get a code sent to your phone when you haven’t tried to access that account, you know something is up and can take swift and effective action. However, while many places are now offering this service, it is often not put into action until you yourself activate it, so you will need to seek it out and actively set it up, which we cannot recommend more that you do. 6. Train Yourself to Detect Phishing As we’ve already mentioned a few times, phishing is one of the main ways hackers and cybercriminals do their dirty work. For those who don’t know, phishing is when hackers use emails or other disguised messages to look legitimate so that you will willingly hand over sensitive information. Other forms of phishing, such as spear phishing, target specific individuals and are often much more personalized, making them more effective. Some good examples of phishing attacks can be found below. One is made to look like a message from Netflix, and another is designed to look like something from Amazon. They show just how good hackers can be at what they do and why they can dupe so many people into handing information over that they should be safeguarding.

- As a result, you need to learn how to be extra vigilant so you can spot phishing attempts and keep yourself safe. Some things you can do to spot phishing include:- Double check the sender address in an email. Fake emails will often come from somewhere different and not from where communications from that company typically originate. - Hover over links you’ve been asked to click on to see if they really lead where they say they do. - Look for spelling mistakes or other errors; hackers are notoriously lazy. - Do a quick Google search to see if the claim being made in the email is real. If it’s not, there’s a good chance that the company in question will have issued a statement. - Familiarize yourself with the different policies being used by the services with which you have accounts. Some say they would never ask for credit card information in an email, so if that’s happening, you know it’s fake.Learning how to spot phishing is a bit of an art, and it takes practice. Luckily, to help you, Google has put together this tool to help teach you to spot phishing. Play around with it so that the next time a suspicious email comes through, you can spot it. We should note that your email client’s spam filter should catch a lot of this, but plenty of stuff still sneaks through. Don’t think that having spam filters activated is going to completely protect you from the many different threats out there. 7. Use Anti-Virus Software Anti-virus software is pretty much a no-brainer when it comes to keeping your home office secure. It will identify threats as they come up, guide you to safe websites by alerting you when you’re visiting one that isn’t secure and help you remove milder versions of malware while minimizing the damage they can do. For PC users, the need for anti-virus software is even greater, but this doesn’t mean Macs are entirely safe. In this case, it’s probably best to speak with someone at your company. They may have a preferred software they want you to use, and if this is the case, they should be able to provide it for free or at the very least at a discounted rate. 8. Ensure Your WiFi is Protected The security of your home WiFi network is a key part of your overall home office security strategy.

9. Download a VPN One thing you may want to consider is installing and using a virtual private network (VPN). These programs encrypt your WiFi connection, which puts up another layer of security and also hides your online activity, helping to improve privacy and keep hackers away. Depending on the size of the company for which you work, doing this may be a requirement to be able to work from home. But even if it’s not, it still might be something to consider as it will make your network that much more secure. One thing to note is that using a VPN will likely slow down network performance, so you might not want to use it constantly, or you may want to look into upgrading your connection so that using this security feature won’t slow things down. 10. Ask About Data Encryption Encrypting data on your computer means that it can only be accessed by those who possess the key that unlocks the encryption. It’s typically used as a safeguard in the event a device is stolen; the person who has it would be unable to access the information stored on the device. For those using a company device, there’s a good chance this is already installed and activated, but you may want to ask if there is anything you need to do to make sure it’s appropriately set up. If you’re using your own device, there’s a good chance it does not have this feature, so you may want to find out if this is something you should set up to make sure you’re fully protected from any possible threat. 11. Back Up Files Regularly Losing files is frustrating and can be dangerous if they happen to fall into the wrong hands. If your computer does come down with a virus, sometimes the only thing you can do is wipe the hard drive and start again. All of this means that if you haven’t backed up your files, this can be catastrophic. So, set up a system to make sure everything is regularly saved somewhere else. You can either do this manually using an external hard drive or by using a cloud service. If you do it manually, set up a reminder on your calendar to remember to do it frequently. Should you choose to use a cloud service, you can usually automate this, but maybe speak with someone at your company to ensure you’re using a service that meets their security standards.

Enjoy the Security of Your Home Office

Microsoft comes under fire for its response to severe weaknesses in its Exchange email software, which are now being exploited en masse.

Andrey_Popov/Shutterstock.com What do we get when we combine the words software and ransom? We get the term 'ransomware.' This is, in fact, one of those looming security woes that make it on the global risk radar every year. How is that, you may ask? How have I not heard of ransomware? Well, do not fret, all can be explained and by the end of the article you will be much more informed about this critical topic. You may or may not have read about ransomware in the news, or more commonly you may have read an article describing a 'data breach' or 'hack' of some kind. This is most probably a ransomware attack since these are almost always high-profile and make it on the mainstream media. Malicious software attacks like ransomware, as well as scams known in the cybersecurity industry as phishing, are the biggest threat to the world economy today. Yes, you've read that correctly. In fact, phishing and ransomware (sometimes a combination of the two) are a higher priority global risk than natural disasters. This has been confirmed by security researchers, IT leaders, and insurance leaders. Ransomware, specifically, is among the most dangerous types of malicious software out there. Another key element to remember is that cyber-attacks at the level of ransomware, a.k.a hacking incidents, require the absolute toughest defenses imaginable to even begin talking about stopping them. The broader implications of high-profile ransomware cyber-attacks are jaw-dropping and have caused innumerable damage in the trillions, in just the past couple of years. This is why we are going to have a look at the types of ransomware out there, and several cybersecurity recommendations on what can be done to stop them. What is Ransomware? Ransomware in recent years has been the go-to tool for high-profile cybercriminals. It is a malicious software code that is created or written by specialist cybercriminals, packaged into a nasty little program. Ransom software belongs to a larger umbrella called malicious software, or malware for short. How does it work? Firstly, ransomware will infect a target computer, network, or system. Secondly, it will take the specifically targeted data on that system (or all of the data) and literally take it hostage. The data will then be encrypted (locked) with a key only known to the cybercriminals. Secondly, instructions will be left by the cybercriminals to the victim on how to unlock the data that has been taken, hostage. Thirdly, the unlock code (decryption key) will be granted to the victim upon payment of a certain amount of ransom (which can vary from thousands to several million.) Even still, these criminal operations can go one step further through blackmail. This is when files are copied over during the encryption process, and cybercriminals threaten to release sensitive data to the public. The ransomware business is highly professional today, with even fancy ransomware cybercriminal groups offering their services to in return for anonymous payments. Forums on the hidden part of the internet are where most of these gangs and their services are stationed. It is known that most ransomware gangs who conduct digital extortion operate from nation-states like China and Russia. A lot of attacks are politically motivated, not just purely for financial gain.

What Are The Different Types of Ransomware Attacks?

There are different types of ransomware as well as different ransomware attack techniques that are worth listing below; - Crypto-ransomware - Locker-ransomware - Leakware/Doxware - RaaS (Ransomware as a Service) - Scareware Starting with the first one which is crypto-ransomware; this is one of the most widely used and devastating types of malicious attack. It's simple and very brutal. It encrypts files that are taken hostage and requires a decryption key to unlock. On the other hand, locker-type ransomware is different from crypto, because it locks the user out of the system completely, therefore 'locking' it. Sometimes a countdown clock is also used in locker-type attacks. Thirdly, leakware or doxware are blackmail attacks that threaten a release of sensitive data (oftentimes these are simpler scams.) Scareware is perhaps the least worrying of the bunch, as it orchestrates fake or urgent claims and asks for payment. Most types of scareware do not lock the computer or lock data but rely on social engineering to trick the victim by 'scaring' them into paying. Finally, we need to look at Ransomware-as-a-Service. What is this exactly? Well, this term refers to a 'service' that includes the full ransomware attack package which is conducted by a specialist cybercriminal in return for payment, or a commission of the final 'loot'.

Real Examples of Ransomware Incidents

There are dozens of real-world scenarios where ransomware incidents were recorded. 2017 particularly, was a bad year for cyber-attacks. Let's look at some of the worst examples that occurred in 2017 alone; - WannaCry - Bad Rabbit - Petya WannaCry, perhaps the most famous ransomware attack that occurred in 2017 is still infecting computers and networks to this day not only in the UK but all over the world. It resulted in victims paying a ransom that did not result in them getting their data back. Secondly, the Bad Rabbit attack crashed computers in countries like; Germany, Turkey, Ukraine, and Russia. Just like WannaCry, this attack forced users to pay hundreds of dollars in Bitcoin worth to regain their computer data. Bad Rabbit leveraged a fake Adobe Flash Player installer to trick victims into installing it. Finally, the Petya ransomware crippled organizations in Europe and the U.S. It crashed systems (causing downtime) and spread through large organizations such as Mondelez, WPP, and the biggest of all which is globally known shipping giant Maersk. Finally, Petya exploited the 'EternalBlue' vulnerability in the Microsoft Windows operating system and had software engineers scrambling to quickly release a fix -leaving those without the fix in danger.

How to Defend Against Ransomware Attacks

We've found four ways to get around the Windows 11 installation error.

If you saw that your PC is not compatible with Windows 11, it may be because your system doesn't have two security settings turned on, Secure Boot and TPM 2.0. Here's how to do it.Sarah Tew/CNET New system requirements for the recently announced Windows 11 may create a range of problems for people looking to upgrade to Microsoft's new operating system on their current PC (here's how to download Windows 11). If you've tried installing Windows 11 Insider Preview or using the now-disabled Microsoft PC Health Checker app, and were greeted with an error message reading "This PC can't run Windows 11," it may be because your system doesn't have two security settings turned on, Secure Boot and TPM 2.0. Both these features have been built into many modern computers and processing chips from Intel and AMD, and are now required for all machines running Windows 11.  If your machine is new enough to support both, enabling TPM (short for Trusted Platform Module) and Secure Boot is often quite easy. No special skills are needed, and you'll just be clicking through menus. If you've never heard the words "BIOS menu" you might feel out of your element, but don't be intimidated. With a little patience, any first-timer can do this.   Here's what you need to know. CNET WINDOWS REPORT

What are TPM and Secure Boot? 

TPM microchips are small devices known as secure cryptoprocessors. Some TPMs are virtual or firmware varieties but, as a chip, a TPM is attached to your motherboard during the build and designed to enhance hardware security during computer startup. A TPM has been a mandatory piece of tech on Windows machines since 2016, so machines older than this may not have the necessary hardware or firmware. Previously, Microsoft required original equipment manufacturers of all models built to run Windows 10 to ensure that the machines were TPM 1.2-capable. TPM 2.0 is the most recent version required. TPMs are controversial among security specialists and governments. An updated and enabled TPM is a strong preventative against firmware attacks, which have risen steadily and drawn Microsoft's attention. However, it also allows remote attestation (authorized parties can see when you make certain changes to your computer) and may restrict the kinds of software your machine is allowed to run. TPM-equipped machines generally aren't shipped in countries where western encryption is banned. China uses its state-regulated alternative, TCM. In Russia, TPM use is only allowed with permission from the government.  Secure Boot is a feature in your computer's software that controls which operating systems are allowed to be active on the machine. It's both a good and bad thing for a Windows machine. On the one hand, it can prevent certain classes of invasive malware from taking over your machine and is a core defense against ransomware.  On the other hand, it can prevent you from being able to install a second operating system on your machine, giving you two to choose from when you first start up your computer. So, if you wanted to experiment with Linux operating systems, for instance, Secure Boot could stop you. Secure Boot also plays a part in preventing Windows pirating. 

TPM and Secure Boot could be the key to getting your device to run Windows 11.Microsoft

A few words of caution 

Now that you know about the secure technologies you'll be using, there are a few things you should keep in mind before you dive into fixing the issue on your own.  - Microsoft confirmed there are four types of problems that might have given you a "This PC can't run Windows 11" error message if you used its PC Health Check tool (as of Monday, the tool has been temporarily disabled so Microsoft can build in more specific feedback as to why your machine is not compatible). If you were able to use the tool before it went offline and saw that you were missing the hardware or firmware necessary for Windows 11, the instructions below won't help -- you'll need to buy a new device to run the OS. - Keep in mind that these instructions are written as broadly as possible. That's because Windows machines vary so much that it's not feasible to cover all the possible ways to enable TPM and Secure Boot across every device. For the most part, though, the process is similar enough across machines that you should be able to use the instructions as a guide and, where your computer differs, still identify the equivalent menu or label in your own system. - If your machine is still covered by a warranty, always speak with the manufacturer first before doing anything that could potentially void it. If your machine is owned and maintained by your company or school, it may have a unique security configuration that your IT staff will need to handle. It's also a good idea to get in contact with your local PC repair shop; having a qualified professional on standby is the best way to get back on track if you get turned around or encounter roadblocks. - Always back up your important files before making any big changes to your computer. Always. Just do it. You'll thank us later. - If this is your first time working in a BIOS menu, stick close to the instructions and don't veer too far from the beaten path. We're on a very simple mission here, and nothing I recommend below will do any damage to your machine or data, but changing firmware settings in your BIOS menu can have a wide-ranging impact. There are few guardrails here, and you can lose a lot of important data very fast. Some mistakes can be permanent and, in most cases, there won't be any polite pop-ups gently asking whether you're sure you want to make those mistakes. You should definitely look around, explore your options and familiarize yourself with what's under the hood, but avoid changing any settings or saving any of those changes unless you know specifically what's going to happen when you do. 

New Windows 11 features include Microsoft Teams integration.Microsoft/Screenshot by Sarah Tew/CNET

Is my device capable of TPM 2.0 and Secure Boot? 

If the PC Health Checker suggested that TPM isn't enabled, you should first find out whether that's an accurate diagnosis. Here's how.  1. From your desktop, press the Windows key next to the spacebar + R. This will bring up a dialog box.  2. In the text field of the box, type tpm.msc and hit Enter. This should bring up a new window labelled "TPM Management on Local Computer."  3. Click Status. If you see a message that says "The TPM is ready for use" then the PC Health Checker has misdiagnosed you, and the steps below won't help. At this point, there are several reasons you might be receiving the wrong error message from Microsoft, so your best bet is to get a professional to take a look at your machine. If you don't see that message, and instead see "Compatible TPM cannot be found" or another message indicating the TPM may be disabled, follow the next steps. 

How do I enable TPM 2.0? 

You're going to need to get to your BIOS menu so you can get to your TPM switch, and there are two ways to do that. We'll cover both here. The first is for much newer PCs, the second method for those a few years older. Regardless of which you choose, though, you're going to need to restart your machine. So save any work and close any open windows or programs before proceeding.  From Windows 10's Start menu If you have a newer machine running Windows 10, your boot time may be too fast for you to try the traditional method of hitting a particular key to get to your BIOS menu before Windows can fully load. Here's how to get to it from inside your normal desktop. 

Brett Pearce/CNET 1. Start your computer normally and open the Start menu by clicking on that Windows button on the far left bottom of your screen. Click on the gear-shaped Settings icon on the left side of the menu.  2. Within the Settings window that appears, click Update & Security. On the left-side pane that appears, click Recovery. Under the Advanced startup header, click Restart now.  Your computer will immediately restart, and instead of restarting and bringing you to your normal desktop screen, you'll be brought to a blue screen with a few options.  3. Click Troubleshoot, followed by Advanced options, followed by UEFI Firmware Settings.  Your device will restart again.  From here, go to Step 2 in the section below and follow the remaining steps.  From start-up You're going to need to move very quickly for Step 1. You'll only have a few seconds to get into the BIOS before your operating system loads. If you miss your window, no harm done, you'll just have to restart the computer and try again. After Step 1, though, feel free to take your sweet time. 1. Restart your computer, and as it's booting up you should see a message telling you to press a certain key to enter the BIOS, whether it uses that word or another. On most Dells, for instance, you should see "Press F2 to enter Setup." Other messages might be "Setup = Del" (meaning Delete) or "System Configuration: F2." Press whatever key the prompt tells you to and enter the Setup menu. Depending on what kind of computer you have, a different key may be needed to enter your Setup menu. It could be F1, F8, F10, F11, Delete or another key. If there's no message on the screen with instructions, the general rule is to hit the key when you see the manufacturer's logo but before Windows loads. To find out which key will get you in, search online for your laptop's make and model along with the phrase "BIOS key."  2. In the BIOS or UEFI menu, there should be at least one option or tab labelled Security. Using your keyboard, navigate to it and hit Enter. On some systems, you might need to use the + key to expand a submenu instead.  3. Once you're inside the Security section, you're going to be looking for the TPM settings. This might be clearly labeled "TPM Device," "TPM Security" or some variation. On Intel machines, it will sometimes be labeled "PTT" or "Intel Trusted Platform Technology." It might also appear as "AMD fTPM Switch."  Warning: Stay alert here. Within most TPM settings menus, you generally have an option to clear your TPM, update it or restore it to factory default. Do not do that right now. Clearing the TPM will cause you to lose all data encrypted by the TPM and all keys to the encryption. This action can not be undone or reversed.  4. From inside the TPM settings menu, you're on one mission only: Find the switch that turns on the TPM. You're not touching anything else. Look through the options inside this menu for one that shows some form of toggle or switch beside the word "Enable" or "Unavailable" or even just "Off." Use your arrow keys to flip that toggle or switch.    5. Once you've kicked on the TPM, look around the screen for Save. Once you've saved this setting, restart the computer. 

Microsoft

How do I enable Secure Boot? 

You'll save yourself a headache if you keep one thing in mind about enabling Secure Boot. Sometimes after you enable Secure Boot on a machine that's running software incompatible with Secure Boot, the machine will refuse to load Windows properly on restart. If that happens, don't panic. You didn't break anything.  No matter which method you've used to get to the boot menu to begin with -- either via Windows 10's Start menu, or by the traditional method of hitting a specific key during start-up -- you can still use the traditional method to get back to the boot menu and disable Secure Boot again.  From Windows 10's Start menu Follow the steps above to access the UEFI Firmware Settings.  1. Once you're in the UEFI, you're going to be looking for the Secure Boot setting. There are a few possible places this could be -- check under any tabs labelled Boot, Security or Authentication.  2. Once you've checked the tabs and found the Secure Boot setting, toggle the switch beside it to turn it on or enable it.  3. Find your Save feature and, after you've saved your changes and exited the menu, your computer should reboot and bring you back to a normal Windows desktop.  There are some PCs on which you may not be able to readily find the Secure Boot setting. Some computers will load Secure Boot keys under a Custom tab. Some computers won't allow you to enable Secure Boot until certain factory settings are restored. If you're unable to access Secure Boot, or get roadblocked here, it's best to get help from a professional rather than take chances.  From start-up If you're not working with UEFI, then you should be able to just enable Secure Boot in BIOS.  1. Just as you did when enabling your TPM, hit F2 (or whichever key your manufacturer specifies) as your computer is booting up and enter the BIOS menu.   2. Go to the tab or option that says BIOS Setup, and then select Advanced.  3. Next, select Boot Options and a list of them should appear.  4. In that list, find Secure Boot. Enable it.  5. Hit Save, exit the menu system, and restart your computer if it does not restart automatically. 

What if I don't have a TPM chip? 

We've found four ways to get around the Windows 11 installation error.

If you saw that your PC is not compatible with Windows 11, it may be because your system doesn't have two security settings turned on, Secure Boot and TPM 2.0. Here's how to do it.Sarah Tew/CNET New system requirements for the recently announced Windows 11 may create a range of problems for people looking to upgrade to Microsoft's new operating system on their current PC (here's how to download Windows 11). If you've tried installing Windows 11 Insider Preview or using the now-disabled Microsoft PC Health Checker app, and were greeted with an error message reading "This PC can't run Windows 11," it may be because your system doesn't have two security settings turned on, Secure Boot and TPM 2.0. Both these features have been built into many modern computers and processing chips from Intel and AMD, and are now required for all machines running Windows 11.  If your machine is new enough to support both, enabling TPM (short for Trusted Platform Module) and Secure Boot is often quite easy. No special skills are needed, and you'll just be clicking through menus. If you've never heard the words "BIOS menu" you might feel out of your element, but don't be intimidated. With a little patience, any first-timer can do this.   Here's what you need to know. CNET WINDOWS REPORT

What are TPM and Secure Boot? 

TPM microchips are small devices known as secure cryptoprocessors. Some TPMs are virtual or firmware varieties but, as a chip, a TPM is attached to your motherboard during the build and designed to enhance hardware security during computer startup. A TPM has been a mandatory piece of tech on Windows machines since 2016, so machines older than this may not have the necessary hardware or firmware. Previously, Microsoft required original equipment manufacturers of all models built to run Windows 10 to ensure that the machines were TPM 1.2-capable. TPM 2.0 is the most recent version required. TPMs are controversial among security specialists and governments. An updated and enabled TPM is a strong preventative against firmware attacks, which have risen steadily and drawn Microsoft's attention. However, it also allows remote attestation (authorized parties can see when you make certain changes to your computer) and may restrict the kinds of software your machine is allowed to run. TPM-equipped machines generally aren't shipped in countries where western encryption is banned. China uses its state-regulated alternative, TCM. In Russia, TPM use is only allowed with permission from the government.  Secure Boot is a feature in your computer's software that controls which operating systems are allowed to be active on the machine. It's both a good and bad thing for a Windows machine. On the one hand, it can prevent certain classes of invasive malware from taking over your machine and is a core defense against ransomware.  On the other hand, it can prevent you from being able to install a second operating system on your machine, giving you two to choose from when you first start up your computer. So, if you wanted to experiment with Linux operating systems, for instance, Secure Boot could stop you. Secure Boot also plays a part in preventing Windows pirating. 

TPM and Secure Boot could be the key to getting your device to run Windows 11.Microsoft

A few words of caution 

Now that you know about the secure technologies you'll be using, there are a few things you should keep in mind before you dive into fixing the issue on your own.  - Microsoft confirmed there are four types of problems that might have given you a "This PC can't run Windows 11" error message if you used its PC Health Check tool (as of Monday, the tool has been temporarily disabled so Microsoft can build in more specific feedback as to why your machine is not compatible). If you were able to use the tool before it went offline and saw that you were missing the hardware or firmware necessary for Windows 11, the instructions below won't help -- you'll need to buy a new device to run the OS. - Keep in mind that these instructions are written as broadly as possible. That's because Windows machines vary so much that it's not feasible to cover all the possible ways to enable TPM and Secure Boot across every device. For the most part, though, the process is similar enough across machines that you should be able to use the instructions as a guide and, where your computer differs, still identify the equivalent menu or label in your own system. - If your machine is still covered by a warranty, always speak with the manufacturer first before doing anything that could potentially void it. If your machine is owned and maintained by your company or school, it may have a unique security configuration that your IT staff will need to handle. It's also a good idea to get in contact with your local PC repair shop; having a qualified professional on standby is the best way to get back on track if you get turned around or encounter roadblocks. - Always back up your important files before making any big changes to your computer. Always. Just do it. You'll thank us later. - If this is your first time working in a BIOS menu, stick close to the instructions and don't veer too far from the beaten path. We're on a very simple mission here, and nothing I recommend below will do any damage to your machine or data, but changing firmware settings in your BIOS menu can have a wide-ranging impact. There are few guardrails here, and you can lose a lot of important data very fast. Some mistakes can be permanent and, in most cases, there won't be any polite pop-ups gently asking whether you're sure you want to make those mistakes. You should definitely look around, explore your options and familiarize yourself with what's under the hood, but avoid changing any settings or saving any of those changes unless you know specifically what's going to happen when you do. 

New Windows 11 features include Microsoft Teams integration.Microsoft/Screenshot by Sarah Tew/CNET

Is my device capable of TPM 2.0 and Secure Boot? 

If the PC Health Checker suggested that TPM isn't enabled, you should first find out whether that's an accurate diagnosis. Here's how.  1. From your desktop, press the Windows key next to the spacebar + R. This will bring up a dialog box.  2. In the text field of the box, type tpm.msc and hit Enter. This should bring up a new window labelled "TPM Management on Local Computer."  3. Click Status. If you see a message that says "The TPM is ready for use" then the PC Health Checker has misdiagnosed you, and the steps below won't help. At this point, there are several reasons you might be receiving the wrong error message from Microsoft, so your best bet is to get a professional to take a look at your machine. If you don't see that message, and instead see "Compatible TPM cannot be found" or another message indicating the TPM may be disabled, follow the next steps. 

How do I enable TPM 2.0? 

You're going to need to get to your BIOS menu so you can get to your TPM switch, and there are two ways to do that. We'll cover both here. The first is for much newer PCs, the second method for those a few years older. Regardless of which you choose, though, you're going to need to restart your machine. So save any work and close any open windows or programs before proceeding.  From Windows 10's Start menu If you have a newer machine running Windows 10, your boot time may be too fast for you to try the traditional method of hitting a particular key to get to your BIOS menu before Windows can fully load. Here's how to get to it from inside your normal desktop. 

Brett Pearce/CNET 1. Start your computer normally and open the Start menu by clicking on that Windows button on the far left bottom of your screen. Click on the gear-shaped Settings icon on the left side of the menu.  2. Within the Settings window that appears, click Update & Security. On the left-side pane that appears, click Recovery. Under the Advanced startup header, click Restart now.  Your computer will immediately restart, and instead of restarting and bringing you to your normal desktop screen, you'll be brought to a blue screen with a few options.  3. Click Troubleshoot, followed by Advanced options, followed by UEFI Firmware Settings.  Your device will restart again.  From here, go to Step 2 in the section below and follow the remaining steps.  From start-up You're going to need to move very quickly for Step 1. You'll only have a few seconds to get into the BIOS before your operating system loads. If you miss your window, no harm done, you'll just have to restart the computer and try again. After Step 1, though, feel free to take your sweet time. 1. Restart your computer, and as it's booting up you should see a message telling you to press a certain key to enter the BIOS, whether it uses that word or another. On most Dells, for instance, you should see "Press F2 to enter Setup." Other messages might be "Setup = Del" (meaning Delete) or "System Configuration: F2." Press whatever key the prompt tells you to and enter the Setup menu. Depending on what kind of computer you have, a different key may be needed to enter your Setup menu. It could be F1, F8, F10, F11, Delete or another key. If there's no message on the screen with instructions, the general rule is to hit the key when you see the manufacturer's logo but before Windows loads. To find out which key will get you in, search online for your laptop's make and model along with the phrase "BIOS key."  2. In the BIOS or UEFI menu, there should be at least one option or tab labelled Security. Using your keyboard, navigate to it and hit Enter. On some systems, you might need to use the + key to expand a submenu instead.  3. Once you're inside the Security section, you're going to be looking for the TPM settings. This might be clearly labeled "TPM Device," "TPM Security" or some variation. On Intel machines, it will sometimes be labeled "PTT" or "Intel Trusted Platform Technology." It might also appear as "AMD fTPM Switch."  Warning: Stay alert here. Within most TPM settings menus, you generally have an option to clear your TPM, update it or restore it to factory default. Do not do that right now. Clearing the TPM will cause you to lose all data encrypted by the TPM and all keys to the encryption. This action can not be undone or reversed.  4. From inside the TPM settings menu, you're on one mission only: Find the switch that turns on the TPM. You're not touching anything else. Look through the options inside this menu for one that shows some form of toggle or switch beside the word "Enable" or "Unavailable" or even just "Off." Use your arrow keys to flip that toggle or switch.    5. Once you've kicked on the TPM, look around the screen for Save. Once you've saved this setting, restart the computer. 

Microsoft

How do I enable Secure Boot? 

You'll save yourself a headache if you keep one thing in mind about enabling Secure Boot. Sometimes after you enable Secure Boot on a machine that's running software incompatible with Secure Boot, the machine will refuse to load Windows properly on restart. If that happens, don't panic. You didn't break anything.  No matter which method you've used to get to the boot menu to begin with -- either via Windows 10's Start menu, or by the traditional method of hitting a specific key during start-up -- you can still use the traditional method to get back to the boot menu and disable Secure Boot again.  From Windows 10's Start menu Follow the steps above to access the UEFI Firmware Settings.  1. Once you're in the UEFI, you're going to be looking for the Secure Boot setting. There are a few possible places this could be -- check under any tabs labelled Boot, Security or Authentication.  2. Once you've checked the tabs and found the Secure Boot setting, toggle the switch beside it to turn it on or enable it.  3. Find your Save feature and, after you've saved your changes and exited the menu, your computer should reboot and bring you back to a normal Windows desktop.  There are some PCs on which you may not be able to readily find the Secure Boot setting. Some computers will load Secure Boot keys under a Custom tab. Some computers won't allow you to enable Secure Boot until certain factory settings are restored. If you're unable to access Secure Boot, or get roadblocked here, it's best to get help from a professional rather than take chances.  From start-up If you're not working with UEFI, then you should be able to just enable Secure Boot in BIOS.  1. Just as you did when enabling your TPM, hit F2 (or whichever key your manufacturer specifies) as your computer is booting up and enter the BIOS menu.   2. Go to the tab or option that says BIOS Setup, and then select Advanced.  3. Next, select Boot Options and a list of them should appear.  4. In that list, find Secure Boot. Enable it.  5. Hit Save, exit the menu system, and restart your computer if it does not restart automatically. 

What if I don't have a TPM chip? 

We've found four ways to get around the Windows 11 installation error.

If you saw that your PC is not compatible with Windows 11, it may be because your system doesn't have two security settings turned on, Secure Boot and TPM 2.0. Here's how to do it.Sarah Tew/CNET New system requirements for the recently announced Windows 11 may create a range of problems for people looking to upgrade to Microsoft's new operating system on their current PC (here's how to download Windows 11). If you've tried installing Windows 11 Insider Preview or using the now-disabled Microsoft PC Health Checker app, and were greeted with an error message reading "This PC can't run Windows 11," it may be because your system doesn't have two security settings turned on, Secure Boot and TPM 2.0. Both these features have been built into many modern computers and processing chips from Intel and AMD, and are now required for all machines running Windows 11.  If your machine is new enough to support both, enabling TPM (short for Trusted Platform Module) and Secure Boot is often quite easy. No special skills are needed, and you'll just be clicking through menus. If you've never heard the words "BIOS menu" you might feel out of your element, but don't be intimidated. With a little patience, any first-timer can do this.   Here's what you need to know. CNET WINDOWS REPORT

What are TPM and Secure Boot? 

TPM microchips are small devices known as secure cryptoprocessors. Some TPMs are virtual or firmware varieties but, as a chip, a TPM is attached to your motherboard during the build and designed to enhance hardware security during computer startup. A TPM has been a mandatory piece of tech on Windows machines since 2016, so machines older than this may not have the necessary hardware or firmware. Previously, Microsoft required original equipment manufacturers of all models built to run Windows 10 to ensure that the machines were TPM 1.2-capable. TPM 2.0 is the most recent version required. TPMs are controversial among security specialists and governments. An updated and enabled TPM is a strong preventative against firmware attacks, which have risen steadily and drawn Microsoft's attention. However, it also allows remote attestation (authorized parties can see when you make certain changes to your computer) and may restrict the kinds of software your machine is allowed to run. TPM-equipped machines generally aren't shipped in countries where western encryption is banned. China uses its state-regulated alternative, TCM. In Russia, TPM use is only allowed with permission from the government.  Secure Boot is a feature in your computer's software that controls which operating systems are allowed to be active on the machine. It's both a good and bad thing for a Windows machine. On the one hand, it can prevent certain classes of invasive malware from taking over your machine and is a core defense against ransomware.  On the other hand, it can prevent you from being able to install a second operating system on your machine, giving you two to choose from when you first start up your computer. So, if you wanted to experiment with Linux operating systems, for instance, Secure Boot could stop you. Secure Boot also plays a part in preventing Windows pirating. 

TPM and Secure Boot could be the key to getting your device to run Windows 11.Microsoft

A few words of caution 

Now that you know about the secure technologies you'll be using, there are a few things you should keep in mind before you dive into fixing the issue on your own.  - Microsoft confirmed there are four types of problems that might have given you a "This PC can't run Windows 11" error message if you used its PC Health Check tool (as of Monday, the tool has been temporarily disabled so Microsoft can build in more specific feedback as to why your machine is not compatible). If you were able to use the tool before it went offline and saw that you were missing the hardware or firmware necessary for Windows 11, the instructions below won't help -- you'll need to buy a new device to run the OS. - Keep in mind that these instructions are written as broadly as possible. That's because Windows machines vary so much that it's not feasible to cover all the possible ways to enable TPM and Secure Boot across every device. For the most part, though, the process is similar enough across machines that you should be able to use the instructions as a guide and, where your computer differs, still identify the equivalent menu or label in your own system. - If your machine is still covered by a warranty, always speak with the manufacturer first before doing anything that could potentially void it. If your machine is owned and maintained by your company or school, it may have a unique security configuration that your IT staff will need to handle. It's also a good idea to get in contact with your local PC repair shop; having a qualified professional on standby is the best way to get back on track if you get turned around or encounter roadblocks. - Always back up your important files before making any big changes to your computer. Always. Just do it. You'll thank us later. - If this is your first time working in a BIOS menu, stick close to the instructions and don't veer too far from the beaten path. We're on a very simple mission here, and nothing I recommend below will do any damage to your machine or data, but changing firmware settings in your BIOS menu can have a wide-ranging impact. There are few guardrails here, and you can lose a lot of important data very fast. Some mistakes can be permanent and, in most cases, there won't be any polite pop-ups gently asking whether you're sure you want to make those mistakes. You should definitely look around, explore your options and familiarize yourself with what's under the hood, but avoid changing any settings or saving any of those changes unless you know specifically what's going to happen when you do. 

New Windows 11 features include Microsoft Teams integration.Microsoft/Screenshot by Sarah Tew/CNET

Is my device capable of TPM 2.0 and Secure Boot? 

If the PC Health Checker suggested that TPM isn't enabled, you should first find out whether that's an accurate diagnosis. Here's how.  1. From your desktop, press the Windows key next to the spacebar + R. This will bring up a dialog box.  2. In the text field of the box, type tpm.msc and hit Enter. This should bring up a new window labelled "TPM Management on Local Computer."  3. Click Status. If you see a message that says "The TPM is ready for use" then the PC Health Checker has misdiagnosed you, and the steps below won't help. At this point, there are several reasons you might be receiving the wrong error message from Microsoft, so your best bet is to get a professional to take a look at your machine. If you don't see that message, and instead see "Compatible TPM cannot be found" or another message indicating the TPM may be disabled, follow the next steps. 

How do I enable TPM 2.0? 

You're going to need to get to your BIOS menu so you can get to your TPM switch, and there are two ways to do that. We'll cover both here. The first is for much newer PCs, the second method for those a few years older. Regardless of which you choose, though, you're going to need to restart your machine. So save any work and close any open windows or programs before proceeding.  From Windows 10's Start menu If you have a newer machine running Windows 10, your boot time may be too fast for you to try the traditional method of hitting a particular key to get to your BIOS menu before Windows can fully load. Here's how to get to it from inside your normal desktop. 

Brett Pearce/CNET 1. Start your computer normally and open the Start menu by clicking on that Windows button on the far left bottom of your screen. Click on the gear-shaped Settings icon on the left side of the menu.  2. Within the Settings window that appears, click Update & Security. On the left-side pane that appears, click Recovery. Under the Advanced startup header, click Restart now.  Your computer will immediately restart, and instead of restarting and bringing you to your normal desktop screen, you'll be brought to a blue screen with a few options.  3. Click Troubleshoot, followed by Advanced options, followed by UEFI Firmware Settings.  Your device will restart again.  From here, go to Step 2 in the section below and follow the remaining steps.  From start-up You're going to need to move very quickly for Step 1. You'll only have a few seconds to get into the BIOS before your operating system loads. If you miss your window, no harm done, you'll just have to restart the computer and try again. After Step 1, though, feel free to take your sweet time. 1. Restart your computer, and as it's booting up you should see a message telling you to press a certain key to enter the BIOS, whether it uses that word or another. On most Dells, for instance, you should see "Press F2 to enter Setup." Other messages might be "Setup = Del" (meaning Delete) or "System Configuration: F2." Press whatever key the prompt tells you to and enter the Setup menu. Depending on what kind of computer you have, a different key may be needed to enter your Setup menu. It could be F1, F8, F10, F11, Delete or another key. If there's no message on the screen with instructions, the general rule is to hit the key when you see the manufacturer's logo but before Windows loads. To find out which key will get you in, search online for your laptop's make and model along with the phrase "BIOS key."  2. In the BIOS or UEFI menu, there should be at least one option or tab labelled Security. Using your keyboard, navigate to it and hit Enter. On some systems, you might need to use the + key to expand a submenu instead.  3. Once you're inside the Security section, you're going to be looking for the TPM settings. This might be clearly labeled "TPM Device," "TPM Security" or some variation. On Intel machines, it will sometimes be labeled "PTT" or "Intel Trusted Platform Technology." It might also appear as "AMD fTPM Switch."  Warning: Stay alert here. Within most TPM settings menus, you generally have an option to clear your TPM, update it or restore it to factory default. Do not do that right now. Clearing the TPM will cause you to lose all data encrypted by the TPM and all keys to the encryption. This action can not be undone or reversed.  4. From inside the TPM settings menu, you're on one mission only: Find the switch that turns on the TPM. You're not touching anything else. Look through the options inside this menu for one that shows some form of toggle or switch beside the word "Enable" or "Unavailable" or even just "Off." Use your arrow keys to flip that toggle or switch.    5. Once you've kicked on the TPM, look around the screen for Save. Once you've saved this setting, restart the computer. 

Microsoft

How do I enable Secure Boot? 

You'll save yourself a headache if you keep one thing in mind about enabling Secure Boot. Sometimes after you enable Secure Boot on a machine that's running software incompatible with Secure Boot, the machine will refuse to load Windows properly on restart. If that happens, don't panic. You didn't break anything.  No matter which method you've used to get to the boot menu to begin with -- either via Windows 10's Start menu, or by the traditional method of hitting a specific key during start-up -- you can still use the traditional method to get back to the boot menu and disable Secure Boot again.  From Windows 10's Start menu Follow the steps above to access the UEFI Firmware Settings.  1. Once you're in the UEFI, you're going to be looking for the Secure Boot setting. There are a few possible places this could be -- check under any tabs labelled Boot, Security or Authentication.  2. Once you've checked the tabs and found the Secure Boot setting, toggle the switch beside it to turn it on or enable it.  3. Find your Save feature and, after you've saved your changes and exited the menu, your computer should reboot and bring you back to a normal Windows desktop.  There are some PCs on which you may not be able to readily find the Secure Boot setting. Some computers will load Secure Boot keys under a Custom tab. Some computers won't allow you to enable Secure Boot until certain factory settings are restored. If you're unable to access Secure Boot, or get roadblocked here, it's best to get help from a professional rather than take chances.  From start-up If you're not working with UEFI, then you should be able to just enable Secure Boot in BIOS.  1. Just as you did when enabling your TPM, hit F2 (or whichever key your manufacturer specifies) as your computer is booting up and enter the BIOS menu.   2. Go to the tab or option that says BIOS Setup, and then select Advanced.  3. Next, select Boot Options and a list of them should appear.  4. In that list, find Secure Boot. Enable it.  5. Hit Save, exit the menu system, and restart your computer if it does not restart automatically. 

What if I don't have a TPM chip?