Memory Integrity will not stay enabled.

Question

I seriously have tried everything. My cpu has virtualisation support. i have forced enabled it using reg edit, the same thing happens as enabling through settings. It reboots and its still disabled. Windows Hypervisor platform is enabled and so it virtual machine platform. I feel like i have tried everything.

Windows11 24H2
System Model ROG Strix G512LV_G512LV

Processor Intel(R) Core(TM) i7-10870H CPU @ 2.20GHz, 2208 Mhz, 8 Core(s), 16 Logical Processor(s)

Virtualisation-based security required security properties Base Virtualisation Support, Secure Boot

Virtualisation-based security available security properties Base Virtualisation Support, Secure Boot, DMA Protection, Mode Based Execution Control, APIC Virtualisation

Virtualisation-based security services configured Hypervisor enforced Code Integrity

Virtualisation-based security services running

https://answers-afd.microsoft.com/static/images/image-not-found.jpg
Its not letting me upload screenshots so i will write out things.

AvailableSecurityProperties : {1, 2, 3, 4...}

CodeIntegrityPolicyEnforcementStatus : 2

InstanceIdentifier : 4ff40742-2649-41b8-bdd1-e80fad1cce80

RequiredSecurityProperties : {1, 2}

SecurityFeaturesEnabled : {0}

SecurityServicesConfigured : {0}

SecurityServicesRunning : {0}

SmmIsolationLevel : 0

UsermodeCodeIntegrityPolicyEnforcementStatus : 1

Version : 1.0

VirtualizationBasedSecurityStatus : 2

VirtualMachineIsolation : False

VirtualMachineIsolationProperties : {0}

PSComputerName

Answer 1

Hello, Louie0002.

We appreciate you posting in Microsoft Community.

Benefiting from your detailed description, I noticed that you can't get Memory Integrity to stay enabled.

I'm glad to have the opportunity to help you with this issue.

You've been on the right path, and virtualization is a necessary prerequisite; forcing it to be enabled by setting up the registry is also a very good troubleshooting step.

I notice that you have actually tried quite a few steps, could you provide me with a list of the steps you have tried?

Not only would this prevent this community from providing you with duplicate programs, the results of those steps would also help us pinpoint the problem.

Also, Memory Integrity does not stay enabled, does this mean that when you turn on Memory Integrity, this feature is disabled after restarting the computer?

From the logs:

SecurityFeaturesEnabled : {0} Indicates that no security features are enabled.

SecurityServicesConfigured : {0} and SecurityServicesRunning : {0} indicates that no security services are configured or running, resulting in memory integrity not taking effect.

VirtualMachineIsolation : False indicates that virtual machine security is not enabled.

This means that there may be some issues with your virtualization and secure boot, and based on past experience, they should be located in the BIOS setup, and since the BIOS page varies greatly from one motherboard manufacturer to another, you can ask your motherboard seller to assist you with this.

After that, you can always come back and let me know what's going on with your issue and I'll see what else I can help you with based on your updates.

Best Regards.

Jeffrey - MSFT | Microsoft Community Support Specialist