Even the Surface Laptop Studio doesn’t come with a hardware TPM chip

Microsoft just announced the new Surface Laptop Studio at its fall Surface event. Sandwiched between updates to the Surface Pro and the Surface Duo, the Laptop Studio is an entirely new product that balances powerful hardware with the design language of the Surface range. And it even looks like a decent gaming machine. One of the specs raises an eyebrow, though. The Surface Laptop Studio comes with firmware TPM, not hardware TPM. This tiny processor has been the center of some controversy since the Windows 11 announcement, and the launch of the new Surface Laptop Studio shows that the buzz around hardware TPM was mostly hot air. Before getting too deep into this issue, some background is important. A Trusted Platform Module (TPM) is a processor that serves as a root of trust on your device. It’s basically a vault for highly sensitive data like cryptographic keys. The best implementation for security is a dedicated chip that lives on your motherboard, separated from other parts of the machine so it can’t be breached. However, many consumer TPM implementations don’t use hardware. They use firmware instead. Firmware TPM does the same thing as hardware TPM, but it stores the sensitive data in secured parts of software and uses the CPU’s power to handle any cryptographic functions. As the Trusted Computing Group says, “the downside to the … firmware TPM is that now the TPM is dependent on many additional aspects to keep it secure.” Basically, there’s a trade-off. Firmware TPM is easier to use and cheaper to implement, but it’s less secure than a dedicated chip. For consumer devices, firmware TPM is all you need. Things like passwords and biometric data aren’t valuable enough for attackers to use sophisticated attacks to get them. Hardware TPM is meant for the data center and enterprises, where hacking groups are more likely to utilize complex tactics to steal data. The Surface Laptop Studio comes with firmware TPM on the consumer version and hardware TPM on the enterprise version — and that’s the right call. The irony is that TPM caused a big fuss when Windows 11 was announced, with dedicated TPM modules shooting up to four times their price on the secondhand market. The Surface Laptop Studio shows that even Microsoft knows that hardware TPM isn’t necessary for most people. A couple of months later, Microsoft resurfaced and held its ground on the TPM requirement. To be clear, Windows 11 supports hardware and firmware TPM — the OS recognizes them as the exact same thing. As scalpers showed around the time of the announcement, though, there were a lot of people that didn’t understand that. The announcement of the Surface Laptop Studio is a bit of poetic justice, and a recognition from Microsoft that the TPM requirement is less important than it was portrayed. I still have issues with the TPM requirement in the first place, but I’ve written about that plenty in the past. Firmware TPM doesn’t change anything about the Surface Laptop Studio. It still looks as secure as it needs to be, and it uses TPM for the latest security features. Firmware TPM is also cheaper — it doesn’t require a separate processor on the motherboard — so it’s nice to see some level-headed thinking when extra manufacturing cost is on the table. Although security is vital in a world of increasing cyber threats, it comes at a cost. Sometimes it’s a time cost, like having to enter complex passwords manually, and other times it’s a monetary cost, like adding a dedicated security processor when software does the trick almost as well. Cybersecurity is inherently a risk assessment. As the Surface Laptop Studio shows, the trade-off between firmware and hardware TPM isn’t relevant for the vast majority of people. Even Microsoft, the company pushing hard for updated security measures on the what’s been called the most secure version of Windows, recognizes that fact. You don’t need to worry about TPM if you plan on picking up a Surface Laptop Studio. Before you go to check out, though, make sure to glance at the spec sheet so you know that TPM isn’t as important as Microsoft made it out to be. Microsoft could be getting ready to reveal the Surface Pro 10 and Surface Laptop 6 sooner than expected. Reporting from Windows Central’s Zac Bowden indicates the devices might be announced on March 21, and could feature both Intel Core Ultra and Snapdragon X Elite chips under the hood, along with some design tweaks. These new Surface devices are expected to go all-in on AI features in Windows 11. More important is that we could see the next Surface Laptop in a new ARM-based variant in addition to one with a traditional Intel Core Ultra CPU. This change in chips should not only bring more choice like the Surface Pro 9 did, but also performance gains that can help the devices rival what Apple has accomplished with the iPad Pro, as well as the new MacBook Pro with the M3 chip. Thanks to the massive success of Apple Silicon, Macs have become increasingly tempting. Plenty of folks are heading back to the Mac for the first time in years, and in doing so, making the dramatic switch from Windows 11 to macOS. When it comes to these operating systems, though, they’re not equal across the board. And in the end, here are the five things that keep me coming back to Windows 11. Device support As a former marketing professional and a laptop reviewer, I often find myself surprised and sometimes confused by the decisions companies make when launching a laptop. An example is when a company introduces just one or two configurations that may not meet the needs of a range of users and, as a result, starts a laptop off on the wrong foot. In that case, I can at least understand the complexity of manufacturing and component sourcing. Although I’ll mention a lack of options in a review, I won’t necessarily ding a laptop because of it. Some mistakes, though, are harder to overlook. That’s how I feel about Microsoft’s Surface Laptop Go 3, which the company introduced at a significantly higher price than its predecessors. The laptop, which is designed and configured like a budget machine, starts at $800 and runs up to $1,000. Those are midrange prices, but the Surface just can’t compete against many midrange laptops.
$800 is too much
Asus Zenbook 14 OLED Mark Coppock / Digital Trends Upgrade your lifestyleDigital Trends helps readers keep tabs on the fast-paced world of tech with all the latest news, fun product reviews, insightful editorials, and one-of-a-kind sneak peeks.