Windows 10: How to Enable MDS Mitigation?

I just updated my laptop to v1903 and installed KB4497165: Intel microcode updates. The security report looks fine apart from the extract below:

Speculation control settings for MDS [microarchitectural data sampling]Windows OS support for MDS mitigation is present: TrueHardware is vulnerable to MDS: TrueWindows OS support for MDS mitigation is enabled: False

Should I enableWindows OS support for MDS mitigation and how do I enable it?

:)

 

Mitigation not enabled

Windows OS support for branch target injection mitigation is enabled: False

Windows OS support for branch target injection mitigation is disabled by system policy: False

Windows OS support for branch target injection mitigation is disabled by absence of hardware support: False

BTIWindowsSupportEnabled : False

BTIDisabledBySystemPolicy : False

BTIDisabledByNoHardwareSupport : False

So what I can gather by this is that the system mitigation is disabled, however not by policy or absense of hardware, so in a nutshell, windows doesn't want to enable it for some unknown reasons. Unlike others who have the mitigation disabled due to absense
of hardware support mine is apparently completely software related.

So I'll ask you guys, how do I enable the protection?

Hardware support for branch target injection mitigation is present: True

Windows OS support for branch target injection mitigation is present: True

As you can see both hardware and software support it.

 

Mitigation not enabled

According to windows Update it's installed, however I do not see it in control panel, when trying to reinstall the update it also says it's already installed.

EDIT: Nevermind, it's also in the controlpanel. So yeah, it's installed. As already stated:

Hardware support for branch target injection mitigation is present: True <- This indicates I have succesfully installed microcode update

Windows OS support for branch target injection mitigation is present: True
<- This indicates that I have succesfully installed the Windows Update

Windows OS support for branch target injection mitigation is enabled: False
<- This tells me that the mitigation protection is disabled

Windows OS support for branch target injection mitigation is disabled by system policy: False
<- This tells me that it's not due to policy

Windows OS support for branch target injection mitigation is disabled by absence of hardware support: False <- neither because of hardware

So ya... dno what to do to enable the mitigation since it seems that at this point windows is trolling me. I'll try to reinstall the update.

 

Mitigating the last "L1 terminal fault" vulnerabilities - possible or not?

I've read that, thanks.

If what you saying is true, this is a departure from how previous vulnerabilities were described, and just adds confusion. The previous way of doing it made far more sense, you could see if the necessary hardware (microcode) was there and if the mitigation
is enabled&working.

With this formulation, it suggests that the hardware is vulnerable, and that's it. Yes you applied the mitigations, but... hardware is still found to be vulnerable.

The whole reason we apply these mitigations is to patch the vulnerable hardware and achieve a non-vulnerable state. You don't want to see that you're still vulnerable with all mitigations in place.