Windows 10: I can't access core isolation on a windows 11 virtual machine

i'm on mac running windows 11 on a virtual machine. i encountered an error in an application so I looked up how to fix it, all the results told me to go to windows security<device security<core isolation, but I can't access core isolation, it says my hardware isn't supported. Anyone know how to fix?

:)

 

Page not availabe: Core Isolation and Devicesecurity

Hi there,
i just reinstalled my PC and I am setting everything back up right now. On my old installation of Windows 11, I had core isolation enabled so I wanted to reinable it. But this time, Windows security tells me, that "page is not available, the page you are trying to access, does not have supported features and is not available" (translation). I have checked my TPM 2.0 and Secure Boot as well as Virtualization settings, everything is up and running. I had Windows 11 Pro on my old machine and now I only have Windows 11 Home, is core isolation a pro exclusive feature? And how do I fix this issue and acivate core isolation?
Thanks for the help!

 

Virtualization Technology (VT) and Windows 11 Core Isolation Features

Dear Community,

I'm currently experiencing a conundrum with my system. I cannot have virtualization enabled on my system after a Windows update was pushed to my system. Let me explain why. The Core Isolation feature, Memory Integrity, is causing the Program Compatibility subsystem to block many of my standard and sole drivers for many programs, some of which are also hypervisors that, obviously, require virtualization to be enabled. No driver replacements exist. No amount of Google-Fu has net me any tangible results. All of the below fix actions are reverted or ignored after restarting the system. I have cleared my TPM keys multiple times from Windows and the BIOS. I even re-joined the Windows Insider Program and subscribed to the Beta Channel to see if a newer feature update would resolve the issue (spoiler: it did not). I do not have a restore point to go back to. Reinstalling Windows is a last resort.

I have only found one solution that isn't ideal, which is to disable Virtualization Technology in my UEFI BIOS. This completely disables those features that I cannot turn off and also disables my ability to operate my hypervisors. I realized this after forgetting to enable it after updating the BIOS.

I could use your assistance in resolving my problem. What fix do you all want me to try (besides the ones that I have listed in this post, of course)?

Here are my system details:

OS: Windows 11 Pro

Version: 10.0.22623 Build 22624

Motherboard: ASUS RoG Maximus XIII Extreme

Processor: Intel Core i9-10900K

BIOS: 1701 (from 1402)

Intel ME Update: 15.XX.XX (it meets or exceeds ASUS requirements for BIOS update)

RAM: 64 GB

Page File: 9.5 GB

TPM: 2.0

Here are the promised fix actions that seem to resolve everyone else's Core Isolation feature issues, but my own:

Registry:

* For all items related to the registry below, 1 = ENABLE, 0 = DISABLE *

Delete Core Isolation Policies - Validate that no entries are underneath this registry path:

Enable/Disable Hypervisor-Protected Code Integrity (HVCI)

Enable/Disable Device Guard features (various):

Virtualization Based Security

CredentialGuard

HypervisorEnforcedCodeIntegrity

KernelShadowStacks

SystemGuard

PowerShell (administrator):

Repair the Windows Security App

Alternate Method via Command Prompt (administrator)

Repair System/Image Files

Scan integrity of protected system files and replace with known good

Review SFC logs for actioned items

Windows Security:

Turn off Core Isolation features via GUI

Start Menu -> type "Core Isolation" -> Open Core Isolation

Drag each slider to the left to turn off/disable for the following:

• Memory Integrity
  
• Firmware Protection
  
• Local Security Authority Protection
  
• Microsoft Vulnerable Driver Blocklist
  

Group Policy:

Configure Device Guard via group policy editor (gpedit.msc)

Start Menu -> type "gpedit.msc" -> Open gpedit.msc

Navigate to:

• Local Computer Policy
  
  • Computer Configuration
    
    • Administrative Templates
      
      • System
        
        • Device Guard
          
          • Open Turn On Virtualization Based Security
            

Two Options Exist to configure the policy:

• Change the policy to Enabled and configure as desired (disable all in my case with exception to Secure Boot configuration)
  
• Change the policy to Disabled
  

 

Virtualization Technology (VT) and Windows 11 Core Isolation Features

Hi kennyrogersjr,

Welcome to Microsoft Community.

I'm Hahn and I'm here to help you with your concern.

I’m sorry to hear that you are having trouble with virtualization and core isolation features on your system.

Thank you for sharing these solutions to this problem, which will help more people who encounter such problems.

While you have already tried turning off the Core Isolation feature, you may want to try disabling Memory Integrity only.

To do this, go to Windows Security -> Device Security -> Core isolation details -> Memory integrity -> turn off the toggle.

But, unfortunately Virtualization Technology (VT) and Windows 11 Core Isolation Features is not supported on the Microsoft Answers forum. It is more suitable for publishing on Microsoft Learn (English only), you can click on "Ask a question", there are experts who can provide more professional solutions in that place.



Here is a link Windows 11 - Microsoft Q&A to the forum where you can raise specific scenarios and share your idea to help solve the problem.

I won't be able to help you, but I'll leave that question open in case one of our amazing volunteers has ideas for you.

If there is anything not clear, please do not hesitate to let me know.



Your Sincerely

| Microsoft Community Support Specialist