Windows Server hardware requirements
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/windowsserverdocs · commit 3fc69de · +11 −2 lines · also on GitHub
⋯ 3 unchanged lines
44
ms.topic: article
55
author: xelu86
66
ms.author: alalve
7
−ms.date: 06/09/2025
7
+ms.date: 06/13/2025
88
ms.assetid: 4a8b42d7-9fe5-4efe-9ea1-ace2131fe068
99
zone_pivot_groups: windows-os-version
1010
---
⋯ 113 unchanged lines
124124
125125
## Secured-Core server requirements
126126
127
−Secured-core is a set of integrated hardware, firmware, driver, and operating system (OS) security features that provide enhanced protection against advanced threats. Secured-core systems deliver security that starts before the OS boots and continues throughout system operation. Secured-core server features are available in Windows Server 2019 and later. To deploy a Secured-core server, your device must meet these additional requirements:
127
+Secured-core is a set of integrated hardware, firmware, driver, and operating system (OS) security features that provide enhanced protection against advanced threats. Secured-core systems deliver security that starts before the OS boots and continues throughout system operation. Secured-core server features are available in Windows Server 2022 and later. To deploy a Secured-core server, your device must meet these additional requirements:
128128
129129
- **DMA Remapping (IOMMU)**: Support for *Intel VT-d* or *AMD-Vi* is required to ensure secure and efficient management of direct memory access (DMA) by devices, safeguarding against unauthorized memory access.
130130
131131
- **Kernel DMA Protection**: The system must have opt-in capability for Kernel DMA Protection, which helps prevent attacks that exploit external peripherals to gain unauthorized access.
132132
133133
- **DRTM (Dynamic Root of Trust for Measurement)**: This feature is needed to ensure a secure boot process by verifying the integrity of the system's startup environment, protecting against firmware-based attacks.
134
+
135
+> [!NOTE]
136
+> In addition to the specific requirements outlined for Secured-core server, the following features must be enabled on your hardware:
137
+>
138
+> - TPM 2.0
139
+> - Secure Boot
140
+> - Virtualization-based Security (VBS) support, including hardware virtualization extensions
141
+>
142
+> To learn more, see [What is Secured-core server?](/windows-server/security/secured-core-server).
134143
135144
## Other requirements
136145
⋯ 22 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/windowsserverdocs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 01:29 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.