Windows 10: Windows Security - Core Isolation - Memory Integrity - No incompatible drivers found

I own a Dell XPS 13 9300, with all latest updates of Windows 11 and drivers through Dell's SupportAssist software installed, as of May 26th, 2023. I've noticed an alert icon on Windows Security a couple days ago and it says my Memory Integrity was disabled due to incompatible drivers, and it was specifically pointing out a smart card reader related to digital signing certificates called "AlcGener.sys - Giesecke & Devrient GmbH".Let's get the obvious out of the way:Windows is updated to its latest versionRan winget /upgrade --all to get the latest version of all software installed nothing

:)

 

Is Memory Integrity in Core Isolation important to run if "incompatible drivers" prevent that?

Recently Windows 11 Security began notifying me that Device Security needs action: Memory Integrity (in Core Isolation) cannot be turned on because of three "incompatible drivers." All three drives were installed from my ZTE Android phone. ZTE cannot provide updated drivers.

1. Is not running Memory Integrity really risky?
   
2. What would happen if I deleted the three specific drivers?
   
3. What are the drivers incompatible with anyway?
   

Not sure why this warning just started, as I have had the phone for several years without any issues.

Thank you.

 

Core Isolation / Memory Integrity Issues

Hi Matthias Heier,

Welcome to Microsoft Community.

I can understand your confusion.

Memory integrity is designed to protect important core processes in Windows.

Memory integrity works by creating an isolated environment using hardware virtualization.





Based on the information you provided, Og software has a real impact on the memory integrity of Windows.

OG software still exists, incompatible drivers are still in the system and can be scanned.

Operations on memory integrity imply changes to the virtualization underlay, and any changes to the memory integrity state can create unexpected problems, such as the blue screen you encounter, until the incompatible driver is removed.

If you want to enable core isolation, we recommend that you remove the incompatible driver first.

You can refer to the steps below to remove the incompatible driver.

• Personally, it is recommended to operate in safe mode.
  
  Start your PC in safe mode in Windows - Microsoft Support
  
• Click Settings >> Privacy & Security >> Windows Security, Select Device Security.
  
  Select Core isolation details.Check if there is a "View incompatible drivers" option.
  
• If so, click to view details and expand incompatible drivers to get the Published name.
  
• When you get the Published name for incompatible drivers. Please following the steps below.
  

1. Type Device Manager, find and run it.
   
2. Click View tab, change to Devices by driver.
   
3. Find the corresponding driver according to the Published name and delete it.
   

If there is anything not clear, please do not hesitate to let me know.



Best Regards,



| Microsoft Community Support Specialist

 

Problem with memory integrity and isolation cores

Hi Kaelyn. I'm Greg, here to help you with this.

There are a number of cases with Core Isolation Memory Integrity error recently. Here is what is resolving most cases:

1) Make sure Secure Boot and TPM are enabled to get the full stable Security benefits of Windows 11:

https://pureinfotech.com/check-enable-tpm-secur...

https://forums.tomshardware.com/threads/tpm-2-0...

2) Then Troubleshoot Core Isolation Memory Integrity issues here:

https://allthings.how/how-to-fix-incompatible-d...

https://www.thewindowsclub.com/core-isolation-a...

https://www.kapilarya.com/fix-memory-integrity-...

https://support.microsoft.com/en-us/windows/why...

https://www.thewindowsclub.com/memory-integrity... (Avoid ad links which intrude into editorial copy, especially avoid Restoro, PC Repair Tool and Reimage ads)

https://allthings.how/how-to-fix-incompatible-d...

3) Drivers which are already added to Windows System 32 driver folders can be surgically removed following this guide:

https://www.drivethelife.com/windows-10/complet... (You DO NOT need the driver updater app, just follow the steps)

4) After reviewing all of these best resources you may decide to disable this feature for now. The best guide for this is here:

https://www.elevenforum.com/t/enable-or-disable...

You can consult with MVP Shawn Brink who is often the best expert for the subjects he writes about, in the Comments section of this tutorial.

Feel free to ask back any questions. Based on the results you post back I may have other suggestions if necessary.

______________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.