Hardware-secured Windows KMS activation with TPM attestation

Microsoft is introducing a new security feature called KMS Hardware-Secured to protect Key Management Service (KMS) activation. This feature uses Trusted Platform Module (TPM) attestation to verify the hardware integrity of your activation servers. Starting with Windows Server 2025, you can assess your infrastructure's readiness for this change. In a future Long-Term Servicing Channel (LTSC) release, this hardware-based verification will become mandatory. This article explains the technical requirements and how you can prepare your environment.
Source

👉@sysadminoff

https://4sysops.com/archives/hardware-secured-windows-kms-activation-with-tpm-attestation/