Tuesday, 29 June 2021

From Windows Server 2019 to Windows Server 2022

Windows Server 2022 is now in preview and is planned for release later in 2021. See this article from the Windows Server team. Note that one of the conditions of use is that you do not use a preview server in a production environment. 

The new 2022 Server brings some Azure innovations on-premise.  

This includes Azure Arc which aims at simplified management of hybrid and multi-cloud environments as well as Storage Migration Service which makes it easy to migrate data from older Windows Server installations to Azure or Windows Server 2019/2022.

The secured-core server is key to WS2022 design. This is a response to the rise in cyberattacks on servers targeted for ransomware attacks or bitcoin mining for example.

Firmware protection is one dimension of the security of the new design. There is evidence that ransomware platforms are adding firmware exploitation capabilities.  There have been attacks e.g. on Active Directory Domain Controllers. DMA protection is one of the defence mechanisms utilized.

Virtualization based security (VBS) is one of the pillars of the secure-core server design. Features  included such as Hypervisor-Protected Code Integrity (HVCI) - also part of Windows 10 (which has some known issues with device drivers).

No comments: