Microsoft Windows Vista is getting a service pack.
This would typically make happy all those business and personal
endusers who wait for that first big batch of fixes before making a switch to a new OS. It should make me
happy. I'm looking at ways to leverage Vista and Bitlocker to provide
tighter security for company laptops, and enhancements to this
capability are included in the list of security enhancements.
- Enables security software vendors a more secure way to communicate with Windows Security Center.
- It comes with APIs that third-party security applications
can work with kernel patch protection on x64 versions of Windows Vista.
- Improves the security of running RemoteApp programs and
desktops by allowing Remote Desktop Protocol files to be signed.
Customers can differentiate user experiences based on publisher
identity.
- Strengthens the cryptography platform with a redesigned
random number generator, which leverages the Trusted Platform Module,
when present, for entropy and complies with the latest standards. The
redesigned RNG uses the AES-based pseudo-random number generator from
NIST Special Publication 800-90 by default.
- Enhances BitLocker Drive Encryption to offer an
additional multifactor authentication method that combines a key
protected by the Trusted Platform Module with a Startup key stored on a
USB storage device and a user-generated PIN.
So why am I still not jumping for joy?
Working for one of those organizations that doesn't even consider a
new OS until the first service pack is released, I've been anxiously
waiting for SP1. We have no Vista systems currently on our network, but
we are seriously considering a move to Vista on our laptops--a move
that allows us to provide full volume encryption and centralized key
management through Active DirectoryNow that SP1 is on the verge of release, I should be looking forward to testing Vista with our remote users. But I'm not.
It seems that SP1 brings with it a plethora of device driver problems.
This is just what I need when rolling out a new OS to users that have
to be supported in hotel rooms, home offices, etc...