Virtualization based security status in msinfo32 is showing as enabled but not running after enabling device guard.

Question

Analysis done:

1. With readiness tool it shows that DG is capable for the system.
2. Virtualization in the BIOS is set properly, and secure boot is also on.
3. By default, Virtualization based security is in running state in windows 11, after enabling the device guard status is changed to enabled but not running. It is happened after enabling the device guard.
4. Enabled all the Hyper-V features and windows Hypervisor Platform in the windows features, but no impact.
5. Memory integrity in the core isolation is also enabled but no impact.
6. Checked by setting the registries to enable the device guard, which is given for the windows 11 in the Microsoft website.

It will be great help, if we get any way to make Virtualization based security status as running after enabling device guard.

Answer 1

Which Insider build are you on?

Right click Start, Run, type winver and hit enter.

Answer 2

Hi Sibro.o

Version 21H2 (OS Build 22000.194)

one more observation is, this issue is occurring once copying the SIPolicy to the codeintegrity folder.

Regards,

Pavan

Answer 3

Version 21H2 (OS Build 22000.194)

I'm sorry, I don't use that branch anymore, no way for me to test your issue.

FYI, the latest build on that branch is 22000.1515, try updating and see if that makes any difference.

Releasing Windows 11 Build 22000.1515 to the Release Preview Channel

Answer 4

Hi Sibro.o,

No impact with this 22000.1515 kb update.

We have scanned the entire C: drive and created new sipolicy and we made it as enforced, with this also there is no impact.

Thanks & regards,

Pavan

Answer 5

No impact with this 22000.1515 kb update.

Is there anything preventing you from updating to 22H2?