|
Product details - Windows server 2022 is built on the strong foundation of windows server 2019 and brings many innovations on three key themessecurity,azure hybrid integration and management,and application platform'. '.strtoupper('s')ecurity the new security capabilities in windows server 2022 combine other security capabilities in windows server across multiple areas to provide defense in depth protection against advanced threats'. '.strtoupper('a')dvanced multi layer security in windows server 2022 provides the comprehensive protection that servers need today'. '.strtoupper('s')ecured core server certified secured core server hardware from an oem partner provides additional security protections that are useful against sophisticated attacks'. '.strtoupper('t')his can provide increased assurance when handling mission critical data in some of the most data sensitive industries'. '.strtoupper('a') secured core server uses hardware,firmware,and driver capabilities to enable advanced windows server security features'. '.strtoupper('m')any of these features are available in windows secured core pcs and are now also available with secured core server hardware and windows server 2022'. '.strtoupper('h')ardware root of trust trusted platform module 2.0 tpm 2.0 secure crypto processor chips provide a secure,hardware based store for sensitive cryptographic keys and data,including systems integrity measurements'. '.strtoupper('t')pm 2.0 can verify that the server has been started with legitimate code and can be trusted by subsequent code execution'. '.strtoupper('t')his is known as a hardware root of trust and is used by features such as bitlocker drive encryption'. '.strtoupper('f')irmware protection firmware executes with high privileges and is often invisible to traditional anti virus solutions,which has lead to a rise in the number of firmware based attacks'. '.strtoupper('s')ecured core server processors support measurement and verification of boot processes with dynamic root of trust for measurement drtm technology and isolation of driver access to memory with direct memory access dma protection'. '.strtoupper('v')irtualization based security vbs secured core servers support virtualization based security vbs and hypervisor based code integrity hvci'. '.strtoupper('v')bs uses hardware virtualization features to create and isolate a secure region of memory from the normal operating system,protecting against an entire class of vulnerabilities used in cryptocurrency mining attacks'. '.strtoupper('v')bs also allows for the use of credential guard,where user credentials and secrets are stored in a virtual container that the operating system cannot access directly'. '.strtoupper('h')vci uses vbs to significantly strengthen code integrity policy enforcement,including kernel mode integrity which checks all kernel mode drivers and binaries in a virtualized environment before they are started,preventing unsigned drivers or system files from being loaded into system memory'. '.strtoupper('s')ecure connectivity secure connections are at the heart of today's interconnected systems'. '.strtoupper('t')ransport layer security tls 1.3 is the latest version of the internet's most deployed security protocol,which encrypts data to provide a secure communication channel between two endpoints'. '.strtoupper('h')ttps and tls 1.3 are now enabled by default on windows server 2022,protecting the data of clients connecting to the server'. '.strtoupper('i')t eliminates obsolete cryptographic algorithms,enhances security over older versions,and aims to encrypt as much of the handshake as possible'. '.strtoupper('l')earn more about supported tls versions and about supported cipher suites'. '.strtoupper('s')ecure dnsencrypted dns name resolution requests with dns over https dns client in windows server 2022 now supports dns over https doh which encrypts dns queries using the https protocol'. '.strtoupper('t')his helps keep your traffic as private as possible by preventing eavesdropping and your dns data being manipulated'. '.strtoupper('l')earn more about configuring the dns client to use doh'. '.strtoupper('s')erver message block smbsmb aes 256 encryption for the most security conscious windows server now supports aes 256 gcm and aes 256 ccm cryptographic suites for smb encryption'. '.strtoupper('w')indows will automatically negotiate this more advanced cipher method when connecting to another computer that also supports it,and it can also be mandated through group policy'. '.strtoupper('w')indows server still supports aes 128 for down level compatibility'. '.strtoupper('a')es 128 gmac signing now also accelerates signing perfomance'. '.strtoupper('s')mbeast west smb encryption controls for internal cluster communications windows server failover clusters now support granular control of encrypting and signing intra node storage communications for cluster shared volumes csv and the storage bus layer sbl'. '.strtoupper('t')his means that when using storage spaces direct,you can decide to encrypt or sign east west communications within the cluster itself for higher security'. '.strtoupper('s')mb direct and rdma encryption smb direct and rdma supply high bandwidth,low latency networking fabric for workloads like storage spaces direct,storage replica,hyper v,scale out file server,and sql server'. '.strtoupper('s')mb direct in windows server 2022 now supports encryption'. '.strtoupper('p')reviously,enabling smb encryption disabled direct data placementthis was intentional,but seriously impacted performance'. '.strtoupper('n')ow data is encrypted data before placement,leading to far less performance degradation while adding aes 128 and aes 256 protected packet privacy'. '.strtoupper('s')mb over quic smb over quic updates the smb 3.1.1 protocol in windows server 2022 datacenterazure edition and supported windows clients to use the quic protocol instead of tcp'. '.strtoupper('b')y using smb over quic along with tls 1.3,users and applications can securely and reliably access data from edge file servers running in azure'. '.strtoupper('m')obile and telecommuter users no longer need a vpn to access their file servers over smb when on windows'. '.strtoupper('m')ore information can be found at the smb over quic documentation'. '.strtoupper('a')zure hybrid capabilities you can increase your efficiency and agility with built in hybrid capabilities in windows server 2022 that allow you to extend your data centers to azure more easily than ever before'. '.strtoupper('a')zure arc enabled windows servers azure arc enabled servers with windows server 2022 brings on premises and multi cloud windows servers to azure with azure arc'. '.strtoupper('t')his management experience is designed to be consistent with how you manage native azure virtual machines'. '.strtoupper('w')hen a hybrid machine is connected to azure,it becomes a connected machine and is treated as a resource in azure'. '.strtoupper('m')ore information can be found at the azure arc enables servers documentation'. '.strtoupper('w')indows admin center improvements to windows admin center to manage windows server 2022 include capabilities to both report on the current state of the secured core features mentioned above,and where applicable,allow customers to enable the features'. '.strtoupper('m')ore information on these and many more improvements to windows admin center can be found at the windows admin center documentation'. '.strtoupper('a')zure automanage hotpatch hotpatch,part of azure automanage,is supported in windows server 2022 datacenterazure edition'. '.strtoupper('h')otpatching is a new way to install updates on new windows server azure edition virtual machines vms that doesn't require a reboot after installation'. '.strtoupper('m')ore information can be found at the azure automanage documentation. |
