Windows 10: What is Kernel-mode Hardware-enforced Stack Protection on Windows Defender AND DO I NEED IT?

I have windows 11 now on my new PC and this morning this came up, saying I was at risk. I am 82 and I use my Computer to keep in touch with family and play games, plus I research our family history thru census and other sites. WHY DO I NEED THIS AND IF I DO WHY IS IT NOT TURNED ON, WHEN I USE WINDOWS DEFENDER AND HAVE USED IT FOR YEARS, from the first time it came out. Before that I used McAfee. Please help me understand why it shows up now. I have had the new PC since March 30th, just last month.

:)

 

Device security Kernel=mode hardware-enforced stack protection is off

Hi, and thanks for reaching out. My name is Bernard a Windows fan like you. I'll be happy to help you out today.

I understand the issue you have, there is nothing to worry I am here to help, this issue occurs when the processor is not compatible or not supporting Kernel-mode Hardware-enforced Stack Protection (KSHSP), in addition, I suggest updating your BIOS first then checking it again.

If the issue persists, kindly follow the steps from Cristiano, here's the link: https://answers.microsoft.com/en-us/windows/for...

Let me know how it goes and I hope that helps.

Bernard

 

LiveKernelEvent BSOD "Kernel-Mode Hardware-Enforced Stack Protection" games

Hi Yitzhak,

Your minidump files all indicate a virtual driver named HoYoKProtect.sys that is usually associated to Genshin Impact as the cause of the system crashes, it seems that driver is incompatible with Kernel-Mode Hardware-Enforced Stack Protection

However, Microsoft released a patch for a bug in Defender last month involving LSA and that new patch has caused errors in Kernel-Mode Hardware-Enforced Stack Protection, so that update fixed one thing and broke another.

So the best option is to leave that disabled until Microsoft provide a patch for this new bug in the latest update.

 

No option for Kernel-mode Hardware-enforced Stack Protection in Core Isolation

Which list are you referring to?

According to this list, the processor is compatible.

Windows processor requirements Windows 11 supported Intel processors

According to this, "Kernel mode hardware enforced protection requires an 11th Gen or higher CPU. (Intel CET or AMD shadow stack support)"

Reddit - Dive into anything

Rocket Lake is 11th Gen.