- Microsoft is leveraging the now-standard TPM to enhance Windows activation security for enterprises, building on the requirement introduced with Windows 11.
- A new TPM-based attestation feature for the Key Management Service (KMS) will verify the hardware identity and integrity of KMS servers to prevent spoofing and piracy.
- TPM-based attestation will become mandatory starting with the next Windows Server release, with Microsoft beginning readiness messaging in Windows Server 2025 from August 2026.
- The move targets abuse of KMS for unauthorized activation, though piracy tools like Massgrave's TSforge may evade the new security measures.