Windows 10: LSA protection off and LSA package is not signed as expected

A week after resetting W11 Home PC, have gotten Windows security / Device security message:“Local Security Authority protection is off. Your device may be vulnerable.”Checked Event Viewer - WIninit Log and there is NO entry stating: “12: LSASS.exe was started as a protected process with level: 4” – this entry has been missing since reset.Instead, I have:“15: Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them.”and multiple:“6155: LSA package is not signed as expected. This can cause unexpected behavior with Credential Gua

:)

 

How to fix LSA package is not signed as expected event log entries?

I did a fresh install of windows 11 with only drivers supplied by the install. The 10 errors: LSA package is not signed as expected. This can cause unexpected behavior with Credential Guard. Is still there.

 

LSA Protection

What I am seeing within the Core Isolation is the following

1. Memory Integrity
   
2. Memory Access Protection
   
3. Vulnerable Driver Blocklist
   

Are all of the above parts of the LSA system? If so are all supposed to be toggled on?

Kenneth

 

LSA Protection

My System Information shows that there is the Kernal DMA Protection. Is this taking the place of the LSA?

Kenneth