I cant turn on the HVCI, no incomp drives. After reboot windows fails, then reboot again with HVCI turned off

Question

Hi, i'm encountering issues enabling Hypervisor-protected Code Integrity (HVCI) as required by Valorant. i feel like i have tried everything.

Settings i have changed:
BIOS mode = UEFI
Secure bootstate = ON

TPM 2.0 = Enabled
IOMMU = Enabled
Virtualization-based security = Running

i have also tried to follow this previous Q/A but with no luck:
https://learn.microsoft.com/en-us/answers/questions/5594915/i-cant-turn-on-the-hvci-thing-even-tho-i-turned-on

So this is the current problem:
When i try to turn on HVCI (Memory Integrity), a restart is prompted and the following happens:
PC shuts down, when it tries to start up it encounter and repairs an error.

after that it reboots again automaticly. This time it does not fail but HVCI is now turned off again.

when i try to edit them directly in my registry, the rapair during reboot fails and i have to roll back my system to before i enabled it:

These are the commands i used to enable thing in registry: (found them in the linked Q/A)

reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v Enabled /t REG_DWORD /d 1 /

reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v EnableVirtualizationBasedSecurity /t REG_DWORD /d 1 /f

Just some additional info:
This happened midgame during a loadingscreen. I can not be sure, but it seemed like it was turned on at the time and out of no where turned off by itself.

also during my own attempts i ended up updating pc from windows 10 to 11 and reseting the pc.

Answer 1

It sounds like you're experiencing compatibility issues when trying to enable Hypervisor-protected Code Integrity (HVCI). Here are some steps you can take to troubleshoot the problem:

1. Check for Driver Compatibility: Ensure that all your device drivers are compatible with memory integrity. You can use the Driver Verifier with Code Integrity checks enabled to validate this. If any drivers are incompatible, they may cause boot failures when HVCI is enabled.
2. Review Code Integrity Logs: Check the Code Integrity logs in Event Viewer under Applications and Service Logs\Microsoft\Windows\CodeIntegrity\Operational. Look for any events with EventID=3087, which may indicate that certain drivers were blocked from loading due to memory integrity settings.
3. Check System Requirements: Make sure your hardware meets the requirements for HVCI. Memory integrity works best with newer processors that support Mode-Based Execution Control (Intel Kabylake and higher, AMD Zen 2 and higher).
4. Disable Other Security Policies: If you have any Group Policies or other security settings that might conflict with HVCI, try disabling them temporarily to see if that resolves the issue.
5. Use Windows Recovery Environment (Windows RE): If you encounter critical errors during boot, you can use Windows RE to disable memory integrity. Boot into Windows RE, set the memory integrity registry key to off, and then restart your device. This can help you regain access to your system if it fails to boot with HVCI enabled.
6. Review Setup Logs: Check the setupact.log for messages related to HVCI enablement. Look for entries that indicate whether memory integrity was enabled or if there were compatibility issues.

If you continue to experience issues, consider rolling back any recent changes or updates that might have affected system stability.

---

References:

• Enable virtualization-based protection of code integrity
• Memory integrity and VBS enablement