Windows 10: How to Enable MDS Mitigation?

Discus and support How to Enable MDS Mitigation? in Windows 10 Support to solve the problem; I just updated my laptop to v1903 and installed KB4497165: Intel microcode updates. The security report looks fine apart from the extract below:... Discussion in 'Windows 10 Support' started by Steve C, Jun 8, 2019.

  1. Steve C Win User

    How to Enable MDS Mitigation?


    I just updated my laptop to v1903 and installed KB4497165: Intel microcode updates. The security report looks fine apart from the extract below:

    Speculation control settings for MDS [microarchitectural data sampling]Windows OS support for MDS mitigation is present: TrueHardware is vulnerable to MDS: TrueWindows OS support for MDS mitigation is enabled: False

    Should I enableWindows OS support for MDS mitigation and how do I enable it?

    :)
     
    Steve C, Jun 8, 2019
    #1
  2. Rob dB Win User

    Mitigation not enabled

    Windows OS support for branch target injection mitigation is enabled: False

    Windows OS support for branch target injection mitigation is disabled by system policy: False

    Windows OS support for branch target injection mitigation is disabled by absence of hardware support: False

    BTIWindowsSupportEnabled : False

    BTIDisabledBySystemPolicy : False

    BTIDisabledByNoHardwareSupport : False

    So what I can gather by this is that the system mitigation is disabled, however not by policy or absense of hardware, so in a nutshell, windows doesn't want to enable it for some unknown reasons. Unlike others who have the mitigation disabled due to absense
    of hardware support mine is apparently completely software related.

    So I'll ask you guys, how do I enable the protection?

    Hardware support for branch target injection mitigation is present: True

    Windows OS support for branch target injection mitigation is present: True

    As you can see both hardware and software support it.
     
    Rob dB, Jun 8, 2019
    #2
  3. Rob dB Win User
    Mitigation not enabled

    According to windows Update it's installed, however I do not see it in control panel, when trying to reinstall the update it also says it's already installed.

    EDIT: Nevermind, it's also in the controlpanel. So yeah, it's installed. As already stated:

    Hardware support for branch target injection mitigation is present: True <- This indicates I have succesfully installed microcode update

    Windows OS support for branch target injection mitigation is present: True
    <- This indicates that I have succesfully installed the Windows Update


    Windows OS support for branch target injection mitigation is enabled: False
    <- This tells me that the mitigation protection is disabled


    Windows OS support for branch target injection mitigation is disabled by system policy: False
    <- This tells me that it's not due to policy

    Windows OS support for branch target injection mitigation is disabled by absence of hardware support: False <- neither because of hardware

    So ya... dno what to do to enable the mitigation since it seems that at this point windows is trolling me. I'll try to reinstall the update.
     
    Rob dB, Jun 8, 2019
    #3
  4. t0yz Win User

    How to Enable MDS Mitigation?

    Mitigating the last "L1 terminal fault" vulnerabilities - possible or not?

    I've read that, thanks.

    If what you saying is true, this is a departure from how previous vulnerabilities were described, and just adds confusion. The previous way of doing it made far more sense, you could see if the necessary hardware (microcode) was there and if the mitigation
    is enabled&working.

    With this formulation, it suggests that the hardware is vulnerable, and that's it. Yes you applied the mitigations, but... hardware is still found to be vulnerable.

    The whole reason we apply these mitigations is to patch the vulnerable hardware and achieve a non-vulnerable state. You don't want to see that you're still vulnerable with all mitigations in place.
     
    t0yz, Jun 8, 2019
    #4
Thema:

How to Enable MDS Mitigation?

Loading...
  1. How to Enable MDS Mitigation? - Similar Threads - Enable MDS Mitigation

  2. Enable Retpoline to mitigate Spectre variant 2 (CVE-2017-5715)

    in AntiVirus, Firewalls and System Security
    Enable Retpoline to mitigate Spectre variant 2 (CVE-2017-5715): Following the release of Cumulative Update KB4482887 Windows 10 v1809 Build 17763.348 there is a lot of discussion regarding the new Retpoline mitigation. This feature has been included in the KB4482887, but is disabled by default. In future updates, or the next Feature...
  3. Guidance to mitigate unconstrained delegation vulnerabilities

    in Windows 10 News
    Guidance to mitigate unconstrained delegation vulnerabilities: Executive Summary Active Directory Forest trusts provide a secure way for resources in a forest to trust identities from another forest. This trust is directional; a trusted forest can authenticate its users to the trusting forest without allowing the reverse.  A...
  4. How to enable JavaScript?

    in Windows 10 Customization
    How to enable JavaScript?: When I start my PC, I see that Microsoft account requires JavaScript to sign in. Then the message appears: ‘This web browser either does not support JavaScript, or scripts are being blocked. To find out whether your browser supports JavaScript, or to allow scripts, see the...
  5. how to enable

    in Windows 10 Customization
    how to enable: 1 )how to enable local group policy management in windows10 home single language https://answers.microsoft.com/en-us/windows/forum/windows_10-other_settings/how-to-enable/34f509da-6b93-4752-a253-c8563dcf7d76
  6. how to enable fingerprint sign in

    in Windows 10 Customization
    how to enable fingerprint sign in: hi, from a couple of days ive been facing this fingerprint problem few days back this sign in option worked properly but when I changed into pin format the fingerprint option as well as setup is gone...
  7. KVA Shadow: Mitigating Meltdown on Windows

    in Windows 10 News
    KVA Shadow: Mitigating Meltdown on Windows: On January 3rd, 2018, Microsoft released an advisory and security updates that relate to a new class of discovered hardware vulnerabilities, termed speculative execution side channels, that affect the design methodology and implementation decisions behind many modern...
  8. Spectre mitigations in MSVC

    in Windows 10 News
    Spectre mitigations in MSVC: Microsoft is aware of a new publicly disclosed class of vulnerabilities, called “speculative execution side-channel attacks,” that affect many operating systems and modern processors, including processors from Intel, AMD, and ARM. On the MSVC team, we’ve reviewed information...
  9. KB4078407 Update to enable mitigation against Spectre, Variant 2

    in Windows 10 News
    KB4078407 Update to enable mitigation against Spectre, Variant 2: This update does not provide protection against Spectre Variant 2. All it does is turn on protection if you had previously disabled it because of a bad BIOS update.
  10. How To Enable Expandable Folders

    in Windows 10 Support
    How To Enable Expandable Folders: I want to enable expandable folders like in previous versions of windows. But can't find out how to do it. Here is a tutorial for Windows 7 to help explain what I am trying to do. How to Auto Expand Sub-Folders in Explorer just like XP in Windows 7 [Tips] | Next of...