I cant use Memory Integrity (HVCI)

Almighty1 · Dec 19, 2024

@345boost - What are the options for "Secure Boot Support"? as I think HVCI does need Secure Boot enabled.

Noticed this thread too:

HVCI is disabled?

HWiNFO today says Hypervisor-protected Code Integrity (HVCI): Disabled I don't have anything Hyper-V checked in Windows Features, and I don't recall turning anything off in the UEFI, but I also don't recall seeing this line (with a red X) in HWiNFO before...

www.elevenforum.com

345boost · Dec 19, 2024

Almighty1 said:
@345boost - What are the options for "Secure Boot Support"? as I think HVCI does need Secure Boot enabled.

Noticed this thread too:

HVCI is disabled?

HWiNFO today says Hypervisor-protected Code Integrity (HVCI): Disabled I don't have anything Hyper-V checked in Windows Features, and I don't recall turning anything off in the UEFI, but I also don't recall seeing this line (with a red X) in HWiNFO before...

www.elevenforum.com

https://imgur.com/a/YBYl1Yf

345boost · Dec 19, 2024

345boost said:
https://imgur.com/a/YBYl1Yf

When I try to turn on hvci, pc stucks at msi screen at next restart and never continues

zbook · Dec 19, 2024

In case you're stuck Microsoft may have troubleshooting options.

Refer to the computer's event viewer reports in post #6.

See if Microsoft Azure support is free or has a fee.

This was displayed in a link:

Guidance for mitigating silicon based micro-architectural and speculative execution side-channel vulnerabilities - Azure Virtual Machines

Learn more about Guidance for mitigating silicon based micro-architectural and speculative execution side-channel vulnerabilities in Azure.

learn.microsoft.com

Code:

If the number of logical processors is greater than physical processors (cores), then hyper-threading is enabled.

If you're running a hyper-threaded VM, contact Azure Support to get hyper-threading disabled. Once hyper-threading

is disabled, support will require a full VM reboot. Refer to Core count to understand why your VM core count decreased.

Code:

The virtualization-based security enablement policy check at phase 3 failed with status: Secure Boot is not enabled on this machine.

Code:

The hypervisor did not enable mitigations for side channel vulnerabilities for virtual machines because HyperThreading is enabled. 

To enable mitigations for virtual machines, disable HyperThreading.

345boost · Dec 19, 2024

zbook said:
In case you're stuck Microsoft may have troubleshooting options.

Refer to the computer's event viewer reports in post #6.

See if Microsoft Azure support is free or has a fee.

This was displayed in a link:

Guidance for mitigating silicon based micro-architectural and speculative execution side-channel vulnerabilities - Azure Virtual Machines

Learn more about Guidance for mitigating silicon based micro-architectural and speculative execution side-channel vulnerabilities in Azure.

learn.microsoft.com

Code:

If the number of logical processors is greater than physical processors (cores), then hyper-threading is enabled. If you're running a hyper-threaded VM, contact Azure Support to get hyper-threading disabled. Once hyper-threading is disabled, support will require a full VM reboot. Refer to Core count to understand why your VM core count decreased.

Hyper Threading doesnt matter its same with on/off

zbook · Dec 19, 2024

The prior post was edited > see last code error message.

345boost · Dec 19, 2024

zbook said:
The prior post was edited > see last code error message.

Dropbox

www.dropbox.com

Can you please check the latest one?
Btw Secure Boot state is ON at msinfo32 right now.

zbook · Dec 19, 2024

It was in a foreign language:

Code:

Çekirdek DMA Koruması    Açık
Sanallaştırma tabanlı güvenlik    Çalıştırılıyor
Sanallaştırma tabanlı güvenlik Gerekli Güvenlik Özellikleri   
Sanallaştırma tabanlı güvenlik Kullanılabilir Güvenlik Özellikleri    Taban Sanallaştırma Desteği, Güvenli Önyükleme, DMA Koruması, SMM Security Mitigations 1.0, Mod Tabanlı Yürütme Denetimi, APIC Sanallaştırması
Sanallaştırma tabanlı güvenlik Yapılandırılmış Hizmetler   
Sanallaştırma tabanlı güvenlik Çalışan Hizmetler    Credential Guard
Cihaz Şifrelemesi Desteği    Görüntülemek İçin Yükseltme Gerekiyor
Hiper yönetici algılandı. Hyper-V için gereken özellikler görüntülenmeyecek.

345boost · Dec 19, 2024

zbook said:

It was in a foreign language:

Code:

Çekirdek DMA Koruması    Açık
Sanallaştırma tabanlı güvenlik    Çalıştırılıyor
Sanallaştırma tabanlı güvenlik Gerekli Güvenlik Özellikleri  
Sanallaştırma tabanlı güvenlik Kullanılabilir Güvenlik Özellikleri    Taban Sanallaştırma Desteği, Güvenli Önyükleme, DMA Koruması, SMM Security Mitigations 1.0, Mod Tabanlı Yürütme Denetimi, APIC Sanallaştırması
Sanallaştırma tabanlı güvenlik Yapılandırılmış Hizmetler  
Sanallaştırma tabanlı güvenlik Çalışan Hizmetler    Credential Guard
Cihaz Şifrelemesi Desteği    Görüntülemek İçin Yükseltme Gerekiyor
Hiper yönetici algılandı. Hyper-V için gereken özellikler görüntülenmeyecek.

Core DMA Protection On
Running virtualization-based security
Virtualization-based security Required Security Features
Virtualization-based security Available Security Features Base Virtualization Support, Secure Boot, DMA Protection, SMM Security Mitigations 1.0, Mode-Based Execution Control, APIC Virtualization
Virtualization-based security Structured Services
Virtualization-based security Employee Services Credential Guard
Device Encryption Support Requires Upgrade to Display
Hypervisor detected. Features required for Hyper-V will not be displayed.

zbook · Dec 19, 2024

The event viewer and other logs could not be read.

If you modify to English then later in the day I'll scan.

Check Azure support.

Add, Remove, and Change Display Language in Windows 10

How to Add or Remove Language Packs and Change Display Language in Windows 10

www.tenforums.com

Change Display Language in Windows 10

How to Change Display Language in Windows 10

www.tenforums.com

345boost · Dec 19, 2024

zbook said:
The event viewer and other logs could not be read.

If you modify to English then later in the day I'll scan.

Check Azure support.

Add, Remove, and Change Display Language in Windows 10

How to Add or Remove Language Packs and Change Display Language in Windows 10

www.tenforums.com

Change Display Language in Windows 10

How to Change Display Language in Windows 10

www.tenforums.com

Dropbox

www.dropbox.com

Its fully English now.

345boost · Dec 19, 2024

https://imgur.com/a/tjVjvca

345boost · Dec 19, 2024

@zbook @Almighty1

zbook · Dec 19, 2024

The event logs started and ended on 12/19.

So there was less than 1 day of data.

The event log files were in mixed languages.

Microsoft Windows 10 Pro

BuildNumber : 19045

Consider installing these drivers:

Code:

PCI Data Acquisition and Signal Processing Controller    PCI\VEN_8086&DEV_06F9&SUBSYS_12BC1462&REV_00\3&11583659&0&90    The drivers for this device are not installed.

SM Bus Controller    PCI\VEN_8086&DEV_06A3&SUBSYS_12BC1462&REV_00\3&11583659&0&FC    The drivers for this device are not installed.

PCI Device    PCI\VEN_8086&DEV_06A4&SUBSYS_12BC1462&REV_00\3&11583659&0&FD    The drivers for this device are not installed.

USB2.0-CRW    USB\VID_0BDA&PID_0129\20100201396000000    The drivers for this device are not installed.

Code:

Event[262]:
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-12-19T21:32:05.7910000Z
  Event ID: 20
  Task: Windows Update Agent
  Level: Error
  Opcode: Installation
  Keyword: Installation,Failure
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: DESKTOP-26FATGD
  Description:
Installation Failure: Windows failed to install the following update with error 0x8024200B: x64 Tabanl² Sistemler iin Windows 10 Version 22H2 2022-11 G³ncelle■tirmesi (KB5020683).

Code:

Secure Boot State    On

Code:

Kernel DMA Protection    On
Virtualization-based security    Running
Virtualization-based security Required Security Properties   
Virtualization-based security Available Security Properties    Base Virtualization Support, Secure Boot, DMA Protection, SMM Security Mitigations 1.0, Mode Based Execution Control, APIC Virtualization
Virtualization-based security Services Configured   
Virtualization-based security Services Running    Credential Guard
Device Encryption Support    Elevation Required to View
A hypervisor has been detected. Features required for Hyper-V will not be displayed.

Almighty1 · Dec 20, 2024

345boost said:
https://imgur.com/a/YBYl1Yf

Can you back up one level to show Security\Secure Boot?

345boost · Dec 20, 2024

Almighty1 said:
Can you back up one level to show Security\Secure Boot?

Check second photo please

Almighty1 · Dec 20, 2024

345boost said:
Check second photo please

Your second photo is the same as the first one if you meant comment #43.

345boost · Dec 20, 2024

Almighty1 said:
Your second photo is the same as the first one if you meant comment #43.

Almighty1 · Dec 20, 2024

@345boost - What options are available for System Mode and Secure Boot Mode? For a laptop, yours has a lot of options available it seems.

345boost · Dec 21, 2024

Almighty1 said:
@345boost - What options are available for System Mode and Secure Boot Mode? For a laptop, yours has a lot of options available it seems.

System Mode has no options, secure boot mode has custom and standart option

I cant use Memory Integrity (HVCI)

Well-known member

My Computer

Member

My Computer

Member

My Computer

Well-known member

My Computer

Member

My Computer

Well-known member

My Computer

Member

My Computer

Well-known member

My Computer

Member

My Computer

Well-known member

My Computer

Member

My Computer

Member

My Computer

Member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Member

My Computer

Well-known member

My Computer

Member

My Computer

Well-known member

My Computer

Member

My Computer

Similar threads