System Information - Device Encryption Question

Question

Could someone let me know why I am getting the following message in System Information please?

Device Encryption Support: Reasons for failed automatic device encryption: Hardware Security Test Interface failed and the device is not Modern Standby, Un-allowed DMA-capable bus/device(s) detected

I am using Windows 11 Pro on a Ryzen 3900x system. I have bitlocker turned on and memory Integrity is enabled. Other security features are as per Windows 11 requirements.

Does this message mean I am missing security features and my PC isn’t as secure as it could/ should be?

Any clarity would be appreciated.

Answer 1

The reason is very simple, your processor does not support modern standby,

Only a few higher-end processors from intel support modern standby.

According to Microsoft, only a few device drivers support "Hardware Security Test Interface" should produce produce driver and test that device before releasing it to public.

For more information see below site

Hardware Security Test Interface (HSTI) 1.1a - Windows drivers | Microsoft Docs

Hardware Security Testability Specification | Microsoft Docs

you need to allow a DMA device, DMA needs a special type of driver, which is entirely from a normal driver.

Answer 2

I just looked at my Modern Standby system as per the previous explanation and it shows..

Meets prerequisites

Answer 3

Congratulations.

I'm surprised mine doesn't. An 3900x isn't very old.

How does this missing compatibility impact device encryption and security generally?

Answer 4

What you are seeing has nothing to do with your device encryption. Your system is the same as other non-Modern Standby systems and is perfectly safe, if there is such a thing..

If you don't know what modern standby is, you can look that up. You can tell if yours is modern standby, which it does not appear to be, if there is no sleep option..

Answer 5

Don't all PCs sleep? Mine does, or am I missing your point?