Microsoft and its hardware partners have new device security requirements to protect against targeted firmware attacks.