Lenovo at CES introduced new ThinkPads containing AMD processors with Microsoft’s Pluton security chip integrated into them. The manufacturer now promises not to enable those by default.
Starting this year, some Windows PCs will come with a new security chip: Pluton. Pluton is a design from Microsoft that not only takes on the capabilities of a TPM chip, but goes a lot further in securing hardware and software. For example, the chip can automatically roll out firmware updates, as well as monitor the code running Windows and take action when suspicious things happen. Processor manufacturers must incorporate Pluton into their chips, and AMD has done just that with its newly announced Ryzen 6000 Mobile chips.
Microsoft interference
The integration of the hardware component with Windows worries some users. After all, you can also see Pluton as a move by Microsoft to entrench itself with laptop hardware, blurring the separation between laptop and OS. Pluton has the potential to force you to stick with Windows 11. Annoying for those who prefer Linux, for example.
read also
Lenovo will not enable Microsoft’s TPM alternative Pluton by default
Lenovo is now reassuring users. The ThinkPad Z-series coming with AMD Ryzen 6000 and Pluton will not require users to use the chip. Lenovo informs The Register that Pluton will not be enabled by default and it is up to users to enable or disable the chip via the Bios.
Compatible with Linux
For its part, AMD stresses that the integration of Pluton on the Ryzen 6000 chips has no impact on the processor’s compatibility with other operating systems. The processors are certified by Canonical and Red Hat.
Those who do like the security capabilities of Pluton and want to combine it with Linux will have to sit on their hands for now. Pluton will not function in a configuration with Linux.
In summary, then, the situation is as follows: those who buy a laptop such as a ThinkPad Z-series device equipped with Pluton can use that security chip in conjunction with Windows. Pluton will then serve as an additional layer of security and optionally take over the work of a TPM chip. If you have no interest in that or prefer to run a different OS, you can simply disable and ignore Pluton.