Windows 10: I want to disable Virtualization based security from my OS as i need to work on esxi

OS windows 11 prolaptop Lenovo T15P gen3steps already been takenturned off core isolationopen EnableVirtualizationBasedSecurity and set it to 0 through DeviceGuardturned windows features off hyper-VVirtual machine PlatformWindows Hypervior Platformstill in the system infomation virtualization is running

:)

 

Solution- February 14, 2023—KB5022842 (OS Build 20348.1547) breaks secure boot for Windows Server 2022 hosted on VMware ESXi 7.x or lower

Issue: February 14, 2023—KB5022842 (OS Build 20348.1547) breaks secure boot for Windows Server 2022 hosted on VMware ESXi 7.x or lower

Workaround:

1. Upgrade the ESXi Host where the virtual machine in question is running to vSphere ESXi 8.0 OR
   
2. For ESXi 7.x apply VMware ESXi 7.0 Update 3k OR
   
3. Disable "Secure Boot" on the VMs.
   

Note: Uninstalling the KB5022842 patch will not resolve the issue. If the Virtual machine has already been updated, please follow the above workaround.

Refer to the links below:

Virtual Machine with Windows Server 2022 KB5022842 (OS Build 20348.1547) configured with secure boot enabled not booting up (90947) (vmware.com)

February 14, 2023—KB5022842 (OS Build 20348.1547) - Microsoft Support

 

My Virtualization Dilemna

Not using hyperv in recent 6 years so I try to make only suggestions related to vmware.

You're right that esxi/vsphere VMs and wksta/player VMs are incompatible. You can use Vmware Converter to "copy" them between different hypervisors however this operation is time consuming and inconvenient so it is better to use only one type of VMs. There are two options, both have its drawbacks and both require disabled hyperv:

1. Using wksta/player VMs; you need to install linux or windows at your home host and then vmware workstation or player in it (so sadly no real type 1 hypervisor). Transferring of VM directories is very easy; furthermore, you can automate starting of VMs and other tasks at your home host using vmrun command from VIX package.

2. Using esxi/vsphere VMs; you can have real type 1 hypervisor at home (esxi installed on bare metal); however, you need to use nested virtualization (hypervisor-in-hypervisor) at your notebook, for example: win10 host - vmplayer - esxi - linux guest. Very simple, there are many step-by-step guides how to do it. In esxi, you have always full control over your VMs but transferring VMs between hosts may be somewhat slow and tricky: you need to use Datastore Browser from esxi webclient or old vSphere Client (not supported for 6.5 and 6.7 versions) to copy folders. If you have some vSphere license you're lucky; you can simply use vMotion migration (or cloning for some reasons) to move (even running) virtual machines, and use vSphere Update Manager to update your esxi hosts.

Nothing is perfect... Nested virtualization requires SLAT capable proccessor for 64-bit guests; of course it is always slower than single tier virtualization but acceptable. And for very basic esxi without vsphere, updating/upgrading hosts requires some handwork with esxcli command.

------------------------------------------

If you really want to use some hyperv-based features of win10 and don't want to reboot frequently, you can install esxi host as a guest in hyperv VM; not tested by me, still nested hypervisors, no idea of performance in this case.
Install ESXi 6.0 in a Hyper-V VM : A step-by-step guide

 

Preinstalled OS Licence - Virtual Windows 10 VM

Hello all,

I own a Lenovo Thinkcentre M720q Tiny, that has a preinstalled OS license. I am creating a VMware ESXi server on the same hardware, and wish to create a Windows 10 virtual machine. Since this vm is technically on the same original hardware can I transfer/use the preinstalled OS license on this vm?

Thanks,
Steve