Microsoft device ID and TPM activation rollout

Microsoft confirmed that Windows installations embed a permanent Global Device Identifier (GDID), a unique 64‑bit value stored in the registry and retained across updates. The agency estimates roughly 1.6 billion PCs carry the GDID, and its use by law‑enforcement—illustrated by the FBI linking a suspect in the Scattered Spider hacking group—has sparked privacy‑rights debate.

In parallel, Microsoft announced a new hardware‑rooted security measure for enterprise activation. Future Windows Server releases will require Key Management Service (KMS) hosts to prove their hardware integrity with a Trusted Platform Module (TPM) before issuing activation keys. Preparation notices for Windows Server 2025 will begin in August 2026, with the TPM‑based check becoming mandatory in the next server version. The initiative aims to curb piracy by preventing counterfeit KMS servers that exploit software‑only verification.

Together, these developments show Microsoft extending both device identification capabilities and activation security, highlighting a shift toward tighter control and hardware‑based trust in its Windows ecosystem.