I want to ensure that drivers I have loaded into the kernel are secure. I clicked on Core Isolation to turn on VBS and noticed that the on/off switch was grayed out and I could scan for driver incompatibilities. Go to the Windows Security app and click Device Security. Additionally I wanted to make sure I was ready for Windows 11 whenever it arrives and adds more security features and requirements. I started digging to understand what was interesting or unique about my system that was preventing me from turning these new features on. Virtualization-based Security (VBS) isolates a secure region of memory from the rest of the OS. It's the collection of all them together, working as a team, that enhances your systems security. Some of these technologies are quite old and have been in Windows for a while. UEFI MAT - Unified Extensible Firmware Interface Memory Memory Attributes Table.In order to be considered enhanced, your system needs to support: First, at the bottom it says 'Your device meets the requirements for standard hardware security' but this can read '.for enhanced hardware security.' I ran the Windows Security app on my system and noticed a few things. In fact, Hypervisor-Protected Code Integrity (HVCI) has been around since the dawn of Windows 10 itself! Turns out this was added way back in 2017 in Windows 10 build 17093. Ok, ready? Feeling technically confident and have backups? Now continue.

You should be able to turn it off and reinstall, but still, be careful. If this blog post or specifically, you following the directions of this blog post, renders your machine unusable or unbootable, I'm sorry but you gotta do your research and back up your system. We recommend that you leave this setting on, if your system supports it.'ĭo be conscious of each driver and what it does and consider what functionality - if any - you'll be losing if you remove them. Memory integrity is one feature of core isolation which regularly verifies the integrity of the code running those core processes in an attempt to prevent any attacks from altering them. It does this by running those core processes in a virtualized environment. 'Core isolation is a security feature of Microsoft Windows that protects important core processes of Windows from malicious software by isolating them in memory. According to the Microsoft Support website:

Can you activate my windows