HVCI is disabled?

Wisewiz · Oct 21, 2023

HWiNFO today says
Hypervisor-protected Code Integrity (HVCI): Disabled

I don't have anything Hyper-V checked in Windows Features, and I don't recall turning anything off in the UEFI, but I also don't recall seeing this line (with a red X) in HWiNFO before.

Advice on what to do (if anything) will be appreciated.

Ghot · Oct 21, 2023

Wisewiz said:
HWiNFO today says
Hypervisor-protected Code Integrity (HVCI): Disabled

I don't have anything Hyper-V checked in Windows Features, and I don't recall turning anything off in the UEFI, but I also don't recall seeing this line (with a red X) in HWiNFO before.

Advice on what to do (if anything) will be appreciated.

HVCI is Memory Integrity.

Enable or Disable Core Isolation Memory Integrity in Windows 11

This tutorial will show you how to turn on or off core isolation memory integrity in Windows 11. Core isolation is a security feature of Microsoft Windows that protects important core processes of Windows from malicious software by isolating them in memory. It does this by running those core...

www.elevenforum.com

Generally, you need to do these things...

1. Enable CPU virtualization in the BIOS
2. Go to Control Panel > Programs and Features > Turn Windows features on or off... and enable virtualization there as well.
3. THEN go to Settings and turn on Memory Integrity.

Wisewiz · Oct 21, 2023

@Ghot: I went through that tutorial, but found no Core Isolation in my Device Security. Security Processor, Secure Boot, and Data Encryption only. I used Brink's reg file for ON.
I'll go back to UEFI and check CPU settings.
In Features, I have Hyper-V, with Management Tools, Platform, Hypervisor, and Services. Platform and Hypervisor are greyed. A bit further down, I find Virtual Machine Platform. All of these are unchecked currently. Which should be checked?
Thanks for this help.

Wisewiz · Oct 21, 2023

OK, I set Intel Virtualization Technology to Enabled, and VT-d to Enabled, and then I found Core Isolation in Device Security, but while both in Details are ON, they are greyed, and a red line tells me this is Managed by my Admin (that's me, of course).
Back in Features, Management Tools and Platform are available now, with two sub-cats each, and all are unchecked, as is Virtual Machine Platform. Check which?

Ghot · Oct 21, 2023

@Wisewiz

Unfortunately, Intel has weird names for CPU virtualization in the BIOS.
Maybe @Try3 would know.

This whole Core Isolation and Memory Integrity thing is like a stack of blocks.
You have to work your way up the stack to get it all to work.
Each block has to be set just right or the stuff higher up, won't work.

Wisewiz · Oct 21, 2023

Memory Integrity and Driver Blocklist are both ON, but greyed.

Again, per my #4 post (Features): check which?

Ghot · Oct 21, 2023

Wisewiz said:
Memory Integrity and Driver Blocklist are both ON, but greyed.

Again, per my #4 post (Features): check which?

I dunno. I'm an AMD CPU guy. AMD is simple. It's called CPU-Virtualization.

Here's where mine is... "Advanced" tab...

They "tried" to emulate Intel... they called mine SVM Mode... but I'm on to them.

Wisewiz · Oct 21, 2023

@Brink and @Try3
Now I've got these in HWiNFO:
Hypervisor-protected Code Integrity (HVCI): Enabled
and
Virtual Machine Warning: Microsoft Hyper-V is active. Some results may not reflect real hardware !

So, the bad red X is gone, but a yellow warning has taken its place. Any suggestions about my settings?

Ghot · Oct 21, 2023

Wisewiz said:
Any suggestions about my settings?

Check Windows Settings, and see if Core Isolation AND Memory Integrity are both ON and NOT greyed out.

Wisewiz · Oct 21, 2023

Both ON; both greyed. Red "managed by ..."

Ghot · Oct 21, 2023

Wisewiz said:
Both ON; both greyed. Red "managed by ..."

What about Programs & Features > Turn Windows features on & off?
There's a virtualization setting in there too.

It could also be the reg patch you used earlier. Try using the "disable" reg patch and see what happens.

Keep in mind that HWInfo, may not be... up-to-date with this, yet.

Wisewiz · Oct 21, 2023

Wow! Good luck!

I think now that HWiNFO tells me this
Hypervisor-protected Code Integrity (HVCI): Enabled
I'll just rest easy. I'm not going to try using @Brink's OFF reg file unless he pops in and says it's worth a try.

Thank you again, Ghot.

Wisewiz · Oct 21, 2023

Oh yeah, ... I checked Hyper-V and Virtualization Platform in Features. I don't think it will hurt anything to have them there, even though I won't be using them.

Ghot · Oct 21, 2023

Wisewiz said:
Oh yeah, ... I checked Hyper-V and Virtualization Platform in Features. I don't think it will hurt anything to have them there, even though I won't be using them.

One of those has to be turned ON, for Core Isolation and Memory Integrity to work... properly.

Wisewiz · Oct 21, 2023

Ghot said:
They "tried" to emulate Intel... they called mine SVM Mode... but I'm on to them.

But I notice that your SVM Mode is DISABLED! I jst went into my UEFI to set two CPU Virtualization settings to ENABLED?

Whaaa???

Ghot · Oct 21, 2023

Wisewiz said:
But I notice that your SVM Mode is DISABLED! I jst went into my UEFI to set two CPU Virtualization settings to ENABLED?

Whaaa???

I don't use Core Isolation or Memory Integrity.
And... that's just a picture from my manual. It's not a picture of my actual BIOS settings.

But I DO happen to have it disabled in my BIOS.

A while back, I did figure out how to turn all that stuff ON, just to see if it would work. It did.

Wisewiz · Oct 22, 2023

@Ghot
Thanks again for the great conversation. Points above. Marking this Solved.

edwardwilhelm · Nov 21, 2023

Wisewiz said:
HWiNFO today says
Hypervisor-protected Code Integrity (HVCI): Disabled

I don't have anything Hyper-V checked in Windows Features, and I don't recall turning anything off in the UEFI, but I also don't recall seeing this line (with a red X) in HWiNFO before.

Advice on what to do (if anything) will be appreciated.

And my computer with the asus crosshair hero VIII motherboard and with Corsair VENGEANCE® RGB PRO, 32GB DDR4 svm mode in the bios I activate it the middle appears how it gets into windows 11 23H2 core isolation memory hwinfo says hvci is disabled and amd-v

HVCI is disabled?

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

Well-known member

My Computers

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

Well-known member

My Computers

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

Well-known member

My Computers

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

Well-known member

My Computers

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

Well-known member

My Computers

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

Well-known member

My Computers

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

Well-known member

My Computers

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

Well-known member

Attachments

My Computers

Similar threads