Windows 10: DMA kernel security issue

hi im tring to install my firmware TPM properly and as investigate and found that it could be caused of condition nessessary for activating it i saw that my kernel DMA protection is off and device encryption support says Device Encryption Support Reasons for failed automatic device encryption: Hardware Security Test Interface failed and device is not Modern Standby, Un-allowed DMA capable bus/devices detected and im kinda lost to figure out what is the device that isn t allowed for DMA protocoli share a one drive link of my sysinfo32 generated if more info is needed https://1drv.ms/u/s!AgeF

:)

 

Kernel DMA protection

Hello @Ulysses,

This might help explain it => Kernel DMA Protection

I hope this helps.

 

how to enable kernel dma protection

Hi jaganathan.p, do you mean that Virtualization Enabled in msinfo32 has a yes on it?

You can also refer to the links below for reference on steps based from MS.

https://docs.microsoft.com/xx-xx/windows/securi....

https://docs.microsoft.com/xx-xx/windows-hardwa...

 

how to enable kernel dma protection

Good day! I am Independent Advisor Paul R. and also a Microsoft/Windows user like you and I am glad to be able to provide assistance to you today. I understand that you are looking to enable the Kernel DMA protection.

Windows 10 home does not exactly support the Hyper-V role/feature in which it can deter with this feature that you are looking to use but if you still want to check your system then you can check the steps below and hopefully this helps out with your query.

- Open the Run window and type msinfo32 and press Enter

- This should open the System Info window, check and find the Kernel DMA Protection option in the list and check if it’s on or off

- If it is on it means that your System is protected from drive by DMA attacks

- If it is off and Virtualization Enabled in Firmware has yes then it means your System does not support the protection feature

- In the event that the feature is off and the Virtualization Enabled in Firmware has no then your System supports the protection feature

Regards,

Paul R.