I cant use Memory Integrity (HVCI)

zbook said:

Please update the EF "My Computer" section with the laptop model.


Run the V2 log collector > post a share link

BSOD - Posting Instructions

BSOD - Posting Instructions This will show you how to help provide needed information about your system and dump files. It will not contain any personal or sensitive information about you or your data. To get better help with your Windows BSOD issue, please read these instructions and follow...

www.elevenforum.com

Enable or Disable Core Isolation Memory Integrity in Windows 11

This tutorial will show you how to turn on or off core isolation memory integrity in Windows 11. Core isolation is a security feature of Microsoft Windows that protects important core processes of Windows from malicious software by isolating them in memory. It does this by running those core...

www.elevenforum.com

Enable or Disable CPU Virtualization in UEFI BIOS Firmware Settings on Windows PC

This tutorial will show you how to enable or disable Intel ("Intel VT" or "VT-x") or AMD ("AMD-V") CPU virtualization in UEFI/BIOS on Windows 10 and Windows 11 PC. CPU virtualization is a hardware feature found in all current AMD and Intel CPUs that allows a single processor to act as if it was...

www.elevenforum.com

Click to expand...

zbook said:

Please use google drive, one drive, or drop box for share links.

Click to expand...

DESKTOP-8JUUMPD-2024...zip

drive.google.com

zbook said:

These were some of the reports in the collected log files.

They may useful for members that troubleshoot memory integrity.

Code:

Event[2224]
  Log Name: System
  Source: Microsoft-Windows-Hyper-V-Hypervisor
  Date: 2024-12-15T21:28:55.0680000Z
  Event ID: 1
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: DESKTOP-8JUUMPD
  Description:
Hypervisor successfully started.

Event[2225]
  Log Name: System
  Source: Microsoft-Windows-Hyper-V-Hypervisor
  Date: 2024-12-15T21:28:55.0680000Z
  Event ID: 2
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: DESKTOP-8JUUMPD
  Description:
Hypervisor scheduler type is 0x4.

Event[2226]
  Log Name: System
  Source: Microsoft-Windows-Hyper-V-Hypervisor
  Date: 2024-12-15T21:28:55.0680000Z
  Event ID: 129
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: DESKTOP-8JUUMPD
  Description:
Hypervisor initialized I/O remapping.

Hardware present: true
Hardware enabled: true
Policy: 0x0
Enabled features: 0x43
Internal information: 0x0
Problems: 0x0
Additional information: 0x0

Event[2227]
  Log Name: System
  Source: Microsoft-Windows-Hyper-V-Hypervisor
  Date: 2024-12-15T21:28:55.0680000Z
  Event ID: 156
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: DESKTOP-8JUUMPD
  Description:
Hypervisor configured mitigations for CVE-2018-3646 for virtual machines.

Processor not affected: true
Processor family not affected: false
Processor supports cache flush: true
HyperThreading enabled: true
Parent hypervisor applies mitigations: false
Mitigations disabled by bcdedit: false
Mitigations enabled: true
Cache flush needed: false
 

Event[2228]
  Log Name: System
  Source: Microsoft-Windows-Hyper-V-Hypervisor
  Date: 2024-12-15T21:28:55.0680000Z
  Event ID: 165
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: DESKTOP-8JUUMPD
  Description:
Hypervisor configured mitigations for CVE-2019-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130 for virtual machines.

Processor not affected: true
Processor family not affected: false
Processor supports microarchitectural buffer flush: false
Buffer flush needed: true
 

Event[2229]
  Log Name: System
  Source: Microsoft-Windows-Hyper-V-Hypervisor
  Date: 2024-12-15T21:28:55.0680000Z
  Event ID: 167
  Task: N/A
  Level: Warning
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: DESKTOP-8JUUMPD
  Description:
The hypervisor did not enable mitigations for side channel vulnerabilities for virtual machines because HyperThreading is enabled. To enable mitigations for virtual machines, disable HyperThreading.

Code:

Event[1982]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-12-15T20:34:21.1290000Z
  Event ID: 124
  Task: N/A
  Level: Error
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: DESKTOP-8JUUMPD
  Description:
The virtualization-based security enablement policy check at phase 3 failed with status: Secure Boot is not enabled on this machine.

Code:

Kernel DMA Protection    On
Virtualization-based security    Running
Virtualization-based security Required Security Properties    Base Virtualization Support, Secure Boot
Virtualization-based security Available Security Properties    Base Virtualization Support, Secure Boot, DMA Protection, SMM Security Mitigations 1.0, Mode Based Execution Control, APIC Virtualization
Virtualization-based security Services Configured  
Virtualization-based security Services Running  
App Control for Business policy    Enforced
App Control for Business user mode policy    Audit
Automatic Device Encryption Support    Elevation Required to View
A hypervisor has been detected. Features required for Hyper-V will not be displayed.

Click to expand...

zbook said:

This is a Microsoft link:

Enable memory integrity

This article explains the steps to opt in to using memory integrity on Windows devices.

learn.microsoft.com

Code:

The virtualization-based security enablement policy check at phase 3 failed with status: Secure Boot is not enabled on this machine.

See if turning on secure boot has an impact:

Enable or Disable Secure Boot on Windows 10 PC

How to Enable or Disable Secure Boot on Windows 10 PC

www.tenforums.com

Click to expand...

zbook said:

Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard

Click to expand...

345boost said:

Check my message above

Click to expand...

dacrone said:

Search your system32 for “dddriver64Dcsa.sys”
Does that driver exist? Apparently there are a few incompatible drivers that do not show in the integrity incompatibility report

Click to expand...

zbook said:

I'm not finding information on how secure boot impacts memory integrity.

Other members may have information.


The log files collected displayed contradictory results for secure boot.

Secure Boot State On

SecureBoot : Not Enabled

Click to expand...

dacrone said:

Search your system32 for “dddriver64Dcsa.sys”
Does that driver exist? Apparently there are a few incompatible drivers that do not show in the integrity incompatibility report

Also - some good insight as to why unsigned drivers flag issues with this feature

https://www.reddit.com/r/techsupport/comments/15k894g/memory_integrity_cant_be_turned_on

Click to expand...

zbook said:

I'm not finding information on how secure boot impacts memory integrity.

Click to expand...