Windows Hardware Newsletter for December 21, 2012

Sign up for other newsletters | Unsubscribe | Update your profile The Windows Hardware Newsletter provides manufacturers and developers the latest technical details for how to succeed with the Windows platform. Did you get this newsletter from a friend? Subscribe to the Windows Hardware Newsletter. News for hardware developers How to convert a PC from BIOS mode to UEFI mode Upgrading your Windows 7 PC to Windows 8 and considering the Unified Extensible Firmware Interface (UEFI) mode? If your PC supports it, this is a great time to change to UEFI. Why? UEFI mode can help your PC start faster, lets you use hard drives larger than 2 terabytes (TB), and can help you set up features like Secure Boot. Many Windows 7 PCs support UEFI but were set to boot to BIOS mode. To switch to UEFI mode, you'll need to do a few things: find the setting in the boot menus that enables UEFI booting, convert the entire drive to the GUID Partition Table (GPT) format, and install Windows again. Step 1: Find the setting in the boot menus that enables UEFI booting This differs from PC to PC. But typically, you press a key to enter the boot menus, look for an option like "UEFI Boot Mode", and enable it. Step 2: Boot the Windows Setup disk in UEFI mode Load the Windows 7 or Windows 8 DVD. (If you're setting up a dual-boot PC, install Windows 7 first.) Start the PC to boot the DVD in UEFI mode. Again, this is going to depend on your hardware, but often you can press a key during the boot sequence, and select an option like "EFI DVD/CD". Step 3: Convert the drive to the GPT format When the Windows Setup program gets to the first set of installation screens, press Shift+F10 to open the command prompt. Figure out which disk is your primary hard drive, and select it. Typically it's Drive 0, but it doesn't hurt to check: diskpart list disk    review the list of drives, and make sure you've got the right one.) select disk 0 Erase the hard drive, and convert it to the GPT format: clean convert gpt exit At this point, you can switch back to the installation program, and continue the Windows installation. Windows automatically sets up the partitions for the UEFI/GPT format. See also: Dual-booting your PC (Windows Hardware Newsletter, November 7, 2012) Recently published for hardware developers Windows driver doc updates These docs have been updated recently on the Windows Hardware Development website: Receive segment coalescing Receive segment coalescing (RSC) enables network card miniport drivers to coalesce multiple TCP segments and indicate them as a single coalesced unit (SCU) to the operating system's networking subsystem. Customizing default audio volume settings Prior to Windows 8, the Audio Class driver used hard-coded default values for the audio volume and microphone boost levels. Windows 8 modified the class driver to make it possible for OEMs to set their own default levels. This involves writing a wrapper INF file to provide the desired default values. A new Windows Driver Kit (WDK) audio topic about customizing default audio volume settings provides more info about how to customize the default volume levels. V4 printer driver model The v4 printer driver model introduced in Windows 8 is designed to address known issues with the printer driver model that was used in Windows 7 and earlier Windows operating systems. The new model simplifies driver development, reduces IT management costs, and supports new scenarios. Customer feedback We also addressed customer feedback in a variety of areas, especially: Bluetooth driver development Updated white papers "Windows Store Device App Lifecycle" The white paper "Windows Store Device App Lifecycle" discusses the deployment, acquisition, update, and uninstall process for Windows Store device apps for Windows 8. This document provides: guidance on how to link and submit device drivers, device metadata, and Windows Store device apps; estimates for the time it takes for the device app to become available to users; what users experience when they connect their devices; and info about how to uninstall or update apps. "Device Metadata Package Schema Reference for Windows 8" The white paper "Device Metadata Package Schema Reference for Windows 8" provides info for independent hardware vendors (IHVs), OEMs , and network carriers about files in device metadata packages. It's a reference guide for creating device metadata packages for Windows 8 and Windows 7, including the structure of the packages and the XML schema definitions used in them. "Display Guidelines for KVM Switches in Windows 7" The white paper "Display Guidelines for KVM Switches in Windows 7" provides guidelines for IHVs of keyboard, video, and mouse (KVM) devices. By following these guidelines, IHVs can provide an optimal user experience in Windows 7 with display devices connected to KVM switches. This paper also lists specific requirements and recommendations on expected switch behaviors. View all recently published hardware documentation, kits, and tools You can always find the latest hardware documentation, kits, and tools published in the Hardware area of the Windows Dev Center from these pages: New hardware documentation and tools What's new in driver development docs for Windows 8 Downloads for hardware development Windows certification news UEFI POST TIME requirement relaxed for some all-in-one systems Based on industry feedback, we're relaxing the UEFI POST TIME requirement to enable large storage capacity in all-in-one systems. Conditions: PCs must be an all-in-one system with integrated displays. Systems that have 3 TB or greater capacity must POST in 10 seconds or less. Systems shipping after Jan 1, 2014, must meet the requirements published on MSDN. This delayed enforcement erratum begins April 15, 2013, when the UEFI requirement Erratum 478 relaxation expires, and ends in October 2014. To take advantage of this new delayed enforcement, Include ID 1250 in your README file starting April 15, 2013 UEFI submission review processes changed UEFI submissions will no longer go through an automated signing process. Instead, we'll review them manually twice a week. You can expect your submission to be processed in about 5 business days. To avoid delays, please follow the guidelines posted on the UEFI submission page on the Hardware Dashboard. Remember when submitting to the UEFI signing portal to: Provide descriptive info when submitting content. Submit only product-quality code. Ensure that your code doesn't execute untrusted code. Some HCK 2.0 errata extended, some set to expire We've updated all active errata filters for Hardware Certification Kit (HCK) 2.0. All active errata that weren't fixed have been extended until March 1, 2013. We'll reevaluate active errata by March 1 and either extend or retire it, depending on whether we made fixes to the test kit. We won't extend the errata already set to expire on January 1, 2013. You can check the status of all errata on the Hardware Dashboard. To narrow down the list, use the filters to view only active, expired, or expiring within 30 days. You can also search by ID and title. Any extension date shouldn't be considered an indication of any retirement date. WLK 1.6 active errata extended into 2015 We have updated all active errata filters for the Windows Logo Kit (WLK) 1.6 test kit. All errata that were fixed in the kit were expired. All active errata that weren't fixed have been extended until December 1, 2015. (This extension date shouldn't be considered an indication of the kit's retirement date.) You can check the status of all errata on the Hardware Dashboard. To narrow down the list, use the filters to view only active, expired, or expiring within 30 days. You can also search by ID and title. Industry news World's oldest working computer gets fired up Visitors can now check out the fully restored nearly 3-ton WITCH as it lights up The National Museum of Computing with its flashing bulbs and chattering printers. - CNET, November 20, 2012 Read more: World's oldest working computer gets fired up Intel chips match ARM for energy efficiency, study says Intel has finally made its mobile microchips as energy efficient as those from companies making ARM-based chips, which dominate the market, according to a study by Bernstein Research.- San Jose Mercury News, December 17, 2012  Read more: Intel chips match ARM for energy efficiency, study says  Microsoft offers businesses guidance on choosing Windows 8 tablets Microsoft is sharing some broad guidance on what criteria business users should consider in evaluating which Windows 8 or Windows RT tablets they should buy. - ZDNet, December 14, 2012 Read more: Microsoft offers businesses guidance on choosing Windows 8 tablets   Hardware Newsletter Edition for December 21, 2012   In this issue News for hardware developers Recently published for hardware developers Windows certification news What's new in blogs for hardware and driver developers Industry news Windows driver developer kits, tools, and programs • Windows hardware development kits and tools • Windows hardware development samples • Windows symbols (August 2012) • Windows Hardware Certification • Newsletter archive Developing drivers with the Windows Driver Foundation (WDF) • Buy the book • WDF documentation • New for WDF • WDF resources Events — in person and online BUILD 2012 session videos Watch sessions on demand from BUILD 2012. Sign up for other newsletters | Unsubscribe | Update your profile © 2012 Microsoft Corporation | Terms of use | Trademarks | Privacy statement

Microsoft respects your privacy. To learn more please read our online Privacy Statement. If you would prefer to no longer receive this newsletter, please click here. To set your contact preferences for other Microsoft communications click here. Microsoft Corporation One Microsoft Way Redmond, WA 98052 USA

Microsoft Security Newsletter - December 2012

Welcome to December’s Security Newsletter! A layered defense can provide protection from unauthorized, unmanaged, and unhealthy computers no matter how they connect to the network. When we talk to customers around the world about threat intelligence, we typically emphasize the importance of layered defenses to help protect against malware. Frequently these conversations focus on protecting the operating system, applications and data. But with the recent release of Windows 8, a new layer has been added to the defense mechanisms that build on several important industry standards. Picture your current antimalware approach for a minute. I am sure many of you perform the standard practices of running antimalware tools, keeping your computer up to date, using strong passwords and being smart about the emails you click on, web sites you visit etc. The one challenge to date has been better assurance about whether your computer has booted from a position of trust. There are many pieces of malicious software, such as rootkits, that seek to hide their existence by running before the operating system completely loads. This type of malware can be hard to detect and remove, so the Secure Boot feature of Windows 8 was introduced to help provide an integrity check on the boot files, operating system, drivers and boot policies. If you are interested in learning more about the topic, I encourage you to check out the blog post "Important advancements toward a safer, more trusted internet" we recently published which takes a deeper dive on some of the standards, technology and processes and how they relate to Windows 8. We’ve also compiled a list of the top resources to help you leverage the native security features in Windows 8, and related technologies such as Windows Intune and System Center Endpoint Protection, in this month’s newsletter. Best regards, Tim Rains, Director Microsoft Trustworthy Computing Note: Due to an error with our email publishing system, you may have also received the consumer version of this newsletter earlier this month. We apologize for any inconvenience this may have caused and have taken measures to prevent this from happening in the future. Thank you for subscribing to the Microsoft Security Newsletter for technical professionals! Top Stories Using the Past to Predict the Future: Top 5 Threat Predictions for 2013 Explore Microsoft TwC Director Tim Rains’ thoughts on the top five trends we may see in the coming year based on observations of the current threat landscape. Compliance Series: Software Security and Compliance Introduction Check out the first of a series of posts about the Microsoft Security Development Lifecycle (SDL) and compliance and learn how the SDL can help you support multiple compliance requirements during software development. New Guidance to Mitigate Determined Adversaries’ Favorite Attack: Pass-the-Hash Although targeted attacks continue to make up a small fraction of the attacks we see today, reports of attacks targeting organizations and governments have attracted a lot of attention recently. As a result, Microsoft has published a comprehensive white paper that contains mitigations and guidance called "Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft Techniques" to help ensure that customers have the most comprehensive guidance to help them implement these tested mitigations. Security Guidance Security Tip of the Month: Configuring BitLocker for Tablets Learn about a new architectural standard called Connected Standby and learn how, with BitLocker, you can eliminate the need for pre-boot authentication in certain types of devices—enabling you to provide the ideal user experience, reduced costs, and increased security on tablets. What’s New in Windows 8 Security Explore the new and changed functionality in Windows 8 security from BitLocker, AppLocker, and smart cards to security auditing and Windows Firewall with Advanced Security and IPsec. Windows 8 Security Demonstrations Watch short, technical demonstrations of key Windows 8 security features for IT professionals and learn how to better secure your Windows 8 PCs while enabling the mobile productivity users have come to expect. BitLocker in Windows 8 – Learn how, with the BitLocker improvements in Windows 8, you can now protect valuable data on often easy-to-lose USB drives in less time and thereby increase end user acceptance of this form of data protection. Secure Boot – Explore Secure Boot, also referred to as Trusted Boot, a new security feature in Windows 8 that leverages the Unified Extensible Firmware Interface (UEFI) to block the loading and operation of any program or driver that has not been signed by an OS-provided key, and thus protects the integrity of the kernel, system files, boot-critical drivers, and even antimalware software. Windows to Go – Explore this new feature for enterprise users of Windows 8 that enables users to securely boot a full version of Windows from external USB drives on host PCs. Security and Data Protection Considerations for Windows To Go Helping to ensure that the data, content, and resources you are working with in the Windows To Go workspace is protected and secure is one of the most important requirements that you have when planning your Windows To Go deployment. This article provides valuable pre-deployment considerations. Preparing for BitLocker: Planning and Policies When you design your BitLocker deployment strategy, define the appropriate policies and configuration requirements based on the business requirements of your organization. Learn how to collect information that you can use to frame your decision-making process about deploying and managing BitLocker systems. Credential Locker Overview Credential Locker is a service that creates and maintains a secure storage area on the local computer that stores user names and passwords the user saved from websites and Windows 8 apps. Get an overview of this feature, learn how it works, and find resources to help you leverage it in your organization. Microsoft Security Compliance Manager 3.0 Beta Refresh The Microsoft Security Compliance Manager (SCM) 3.0 Beta Refresh is now available for download and includes new security and compliance baselines for Windows Server 2012, Windows 8, and Internet Explorer 10. Not familiar with SCM? Read this short overview and answers to frequently asked questions. Community Update Security MVP Tip: Using System Center Endpoint Protection The successor to Forefront Endpoint Protection, and available through and managed by System Center Configuration Manager 2012, System Center Endpoint Protection is Microsoft’s enterprise antimalware solution. In this article, Security MVP Orin Thomas explores the benefits of deploying System Center Endpoint Protection to better protect Windows 8 and Windows Server 2012 computers. Cloud Security Corner Managing Device Security with Windows Intune Windows Intune is an integrated, cloud-based client management solution that provides tools, reports, and upgrade licenses to the latest version of Windows. Learn how you can use Windows Intune to help secure your computers and mobile devices. This Month's Security Bulletins Microsoft Security Bulletin Summary for December 2012 Critical MS12-077: Cumulative Security Update for Internet Explorer (2761465) MS12-078: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2783534) MS12-079: Vulnerability in Microsoft Word Could Allow Remote Code Execution (2780642) MS12-080: Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution (2784126) MS12-081: Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2758857) Important MS12-082: Vulnerability in DirectPlay Could Allow Remote Code Execution (2770660) MS12-083: Vulnerability in IP-HTTPS Component Could Allow Security Feature Bypass (2765809) December 2012 Security Bulletin Resources: Microsoft Security Response Center (MSRC) Blog Post Security Bulletin Quick Overview (MP4) – 600k | 400k Security Bulletin Webcast (MP4) – 3000k | 600k | 400k Security Bulletin Webcast Q&A Security Events and Training Windows 8 Jump Start: Recovery and Security Learn how to better control, secure, and manage Windows 8 PCs with BitLocker, UEFI, Secure Boot, and Measured Boot. This course will go over the security features integrated into Windows 8 and then walk you through the process of leveraging complementary technologies such as the Diagnostics and Recovery Toolset (DaRT) and Microsoft BitLocker Administration and Monitoring (MBAM). Microsoft Virtual Academy: Operating and Managing a Secure Windows 8 Environment Find out how to keep your users safe and protect your infrastructure by using advanced Windows 8 technologies like AppLocker, BitLocker, and Windows Firewall. In this course, you will explore the security and privacy options in Windows 8 and learn how to manage a more secure Windows 8 environment. TechNet Webcast: Information About the January 2013 Security Bulletin Release Wednesday, January 9, 2013 Join this webcast for a brief overview of the technical details of January’s Microsoft security bulletins. As the goal is to address your concerns, Microsoft security experts devote most of the webcast to answering the questions that you ask. TechNet Webcast: Information About the February 2013 Security Bulletin Release Wednesday, February 13, 2013 Join this webcast for a brief overview of the technical details of February’s Microsoft security bulletins. As the goal is to address your concerns, Microsoft security experts devote most of the webcast to answering the questions that you ask. – December 2012 – In This Issue Top Stories Security Guidance Community Update Cloud Security Corner This Month′s Security Bulletins Security Events and Training Essential Tools Microsoft Security Bulletins Microsoft Security Compliance Manager Enhanced Mitigation Experience Toolkit Malware Response Guide Microsoft Malicious Software Removal Tool Microsoft Baseline Security Analyzer Microsoft Security Development Lifecycle Starter Kit Troubleshooting and Support Security Troubleshooting and Support Resources Microsoft Support Security Product Solution Centers Microsoft Support Virus & Security Solution Center TechNet Forums Security Blogs Trustworthy Computing Security and Privacy Microsoft Security Microsoft Malware Protection Center Microsoft Security Development Lifecycle Microsoft Security Research and Defense Microsoft Security Response Center Security and Compliance Solution Accelerators Additional Resources TechNet Security Center Microsoft Malware Protection Center Microsoft Security Response Center Microsoft Security Development Lifecycle Security Demonstrations and Tutorials Security Intelligence Report This is a monthly newsletter for IT professionals and developers—bringing security news, guidance, updates, and community resources directly to your inbox. If you would like to receive less technical security news, guidance, and updates, please subscribe to the Microsoft Security for Home Computer Users Newsletter. © 2012 Microsoft Corporation. All rights reserved. Microsoft, MSDN, Windows, Windows NT, and Windows Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Microsoft respects your privacy. To learn more please read our online Privacy Statement. If you would prefer to no longer receive this newsletter, please click here. To set your contact preferences for other Microsoft communications click here. Microsoft Corporation One Microsoft Way Redmond, WA 98052 USA