Endpoint security, the limits of BitLocker and the new HP hardware protection

Vulnerability lies in communication mode between the TPM chip and the CPU during the system boot phase; a hacker, using the “TPM bus snooping” technique, can intercept the release of the decryption key using hardware of negligible cost. This criticality does not arise from software defects, but from the hardware architecture itself, making common system updates ineffective. The growing adoption of artificial intelligence applications, which require the local storage of significant volumes of data, makes devices increasingly desirable targets, while also raising questions about regulatory compliance if the laptop is stolen or lost.

Giampiero Savorelli, VP and AD HP Italy

“In Italy, hybrid work is now a consolidated model, with over 3.5* million professionals involved and a diffusion that affects 95%* of large companies, where more than half of the employees work at least partly remotely, while in SMEs the diffusion of smart working still shows a limited presence and stops at around 8%*” declared Giampiero Savorelli, VP and AD HP Italy. “This means that company devices increasingly operate outside the traditional office perimeter, expanding the surface area and situations of potential attack. In this context, the protection of PC and printing endpoints can no longer be based exclusively on software solutions, but requires an integrated approach, security by design, which also includes security designed already at the hardware level.”

To mitigate this risk, the industry is moving towards “hardware-first” security strategies, moving beyond software monitoring alone in favor of protections rooted directly in the silicon. Next-generation solutions, such as HP TPM Guard, introduce encrypted communication channels between TPM and CPU and a unique cryptographic bond between component and deviceaiming to fill this historical gap and ensuring data integrity without burdening the management complexity of IT teams.

As emerging from the modern security debate, hybrid working has permanently changed how and where corporate devices are used, forcing businesses to adopt setups where “once a laptop leaves the office, it must be able to defend itself.”