How to activate virtualization-based security and core isolation in Windows 10

  • Technology
  • How to activate virtualization-based security and core isolation in Windows 10

Give your PC a little extra security. HVCI and VBS are available in 64-bit versions of Windows 10, but you must turn them on manually. We show you how.

Image: your/Shutterstock

Many of the hardware and software security features Microsoft lists as absolute requirements for a successful Windows 11 installation are already available as options in Windows 10. In some cases, getting these more advanced levels of security is just a matter of turning them on, particularly on newer PCs. One of the more powerful of these security features is the Hypervisor-Protected Code Integrity protocol.

Also known as memory integrity or core isolation protocols, HVIC uses virtualization-based security systems to strengthen code integrity policy enforcement. Recently purchased computers running 64-bit versions of Windows 10 will likely have HVIC up and running by default, but for security’s sake you should check out your system settings to be sure.

SEE: From data to devices: Strengthen your cyber defenses with these security policies (TechRepublic Premium)

How to activate VBS and HVCI in Windows 10

To check if VBS and HVIC are active and running on your Windows 10 personal computer, we will have to delve deeply into the Settings menu. Click or tap the Start Button and select Settings (gear icon). From the Settings menu select Update & Security and then select Windows Security from the navigation bar located in the left windowpane, as shown in Figure A.

Figure A


On this screen, click Device Security from the list of items in the right windowpane. As you can see in Figure B, this Settings screen deals with several advanced Windows 10 security protocols.

Figure B


To check the status of HVIC we want to drill down on core isolation, so click the Core Isolation Details link to reveal the details page shown in Figure C.

Figure C


If your Windows 10 PC is capable, it is a good idea to turn the memory integrity features on. Just toggle the switch to the “on” position. After answering a security check, you will have to restart your PC for the protocols to take effect.

Why activate VBS and HVIC?

VBS uses Hyper-V to create and isolate a secure memory region from the operating system, which is used to protect Windows 10 and Windows 11 from security vulnerabilities introduced by legacy support. HVCI takes advantage of VBS to check all kernel-mode drivers and binaries to prevent unsigned drivers and system files from being loaded into system memory. The security protocols also work with application code, catching malware before too much harm can be done.

SEE: Microsoft’s new security tool will discover firmware vulnerabilities, and more, in PCs and IoT devices (TechRepublic) 

Unfortunately, HVIC and VBS are only available on systems running 64-bit versions of Windows 10 (and eventually Windows 11). Those of you running 32-bit systems will have to upgrade your software and possibly your hardware to access these core isolation security features. These features also require an updated input-output memory management unit. This is why so many older PCs have been failing the Windows 11 capability tests.

Microsoft’s hard line on updated hardware with advanced security features as a prerequisite for Windows 11 comes in direct response to recent high-profile cyberattacks involving ransomware and other malicious activity. Unfortunately, we are in an arms race with cyber criminals, and it is increasingly difficult for normal everyday users to keep up. If your PC is capable, HVIC and VBS can help stave off at least some of the more common attacks.

How to activate virtualization-based security and core isolation in Windows 10

Microsoft Weekly Newsletter

Be your company’s Microsoft insider by reading these Windows and Office tips, tricks, and cheat sheets.
Delivered Mondays and Wednesdays

Sign up today

Also see

Did you like this article? You can read it and many others @ Tech Republic!


Here's the latest news

Simone Biles' fans are finally getting to see her one and only rotation at the gymnastics team final of the Tokyo Olympics. Biles competed in just one rotation, on vault, before walking off the floor due to a "medical issue," USA Gymnastics...

See the Moment Simone Biles Pulled Out of Team Competition at Olympics

Still, there is real-world evidence that mandates work.Dr. Offit said Mississippi, which has one of the nation’s lowest coronavirus vaccination rates, has extraordinarily high rates of childhood immunization because its state law does not allow philosophical or religious exemptions.When a...

Biden Weighs Vaccine Mandate for Federal Workers

The motto for the 2021 Olympics is, "Faster, Higher, Stronger, Together." It could probably be tagged as the motto for the 2021 NHL offseason too. All 32 franchises are assuredly wanting to get faster, make their lineup stronger and go higher in the...

NHL free agency tracker 2021: Live updates, analysis on news, rumors, signings and trades automates fixes that range from one-line commands to remediation loops. Image: Ashalatha/Shutterstock Fix once, automate the solution and then deploy many times. That's the philosophy behind, a company that aims to make life easier for site reliability engineers. ...

New automation platform aims to help DevOps engineers squash tickets forever

Photography via Hot Girl Summer, coming right up. By Souzan Michael Galway Date July 27, 2021 If the never-ending rain and humidity have made it hard for you to have a hot girl summer this year, help is on...

Everything to Know About the Megan Thee Stallion x Revlon Collection
Load More
Share via
Copy link
Powered by Social Snap