Microsoft Pluton.

A Microsoft-designed security processor integrated into the CPU die that implements a firmware TPM 2.0, key isolation, and identity attestation for Windows 11. It belongs to the Cryptography category of cybersecurity.

A Microsoft-designed security processor integrated into the CPU die that implements a firmware TPM 2.0, key isolation, and identity attestation for Windows 11.

Microsoft Pluton is a security subsystem co-developed with AMD, Intel, and Qualcomm and integrated directly into the SoC, rather than on a separate TPM chip on the motherboard. It originated in Xbox One and Azure Sphere and ships on Windows 11 systems based on AMD Ryzen 6000+, Qualcomm Snapdragon 8cx Gen 3, and Intel Core Ultra. Pluton implements a firmware TPM 2.0 measured-boot root of trust, hardware key isolation behind a Secure HCI bus, anti-rollback storage, and System Guard runtime attestation. It receives signed firmware updates through Windows Update, which is intended to close the gap of out-of-date discrete TPM firmware, though it has also raised concerns about vendor neutrality and self-hosted firmware.

Defences for Microsoft Pluton typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: Pluton, Microsoft Pluton security processor.