Microsoft will automatically start activating the memory integrity protection on more computers with Windows 11 starting next October. The function is not new and has been available in the operating system for years, but until now many compatible devices could have it disabled. The novelty is that quality Windows updates will begin enabling it by default when Microsoft determines that the device meets the requirements.
Memory integrity, also known as HVCIuses hardware virtualization to create an isolated environment where Windows checks the code that is intended to run in the kernel, the Windows core. This part of the system has access to critical resources, so preventing drivers or malicious code from running on it makes it difficult for an attacker to take control of the computer. The feature is part of Windows virtualization-based security, called VBS.
‘Windows quality updates will begin to enable memory integrity protection on supported devices. If not already enabled, these updates will also enable virtualization-based security (VBS), This will enable additional security features and reflects our commitment to making Windows secure by design and secure by default.’explains Peter WaxmanMicrosoft Program Manager in a post on the Microsoft Tech Community.
The problem for those who use the computer mainly to play is that this protection has a performance cost. Microsoft has previously acknowledged that VBS and memory integrity can affect gaming performance. The impact depends on the hardware and the game, although modern processors generally suffer a smaller penalty. On computers with older CPUs you can see a larger frame rate reduction in certain titles.
Those who have expressly disabled memory integrity should not find it enabled again after updating Windows. Microsoft assures that it will respect the previous decisions of users and administrators. The change will mainly affect compatible devices in which protection was not enabled by defaultas long as Windows determines that they meet the hardware, compatibility, and performance requirements.
How to disable memory integrity protection in Windows 11
To check its status, simply search ‘Core isolation’ from the menu Start and open the corresponding section in Device security. Inside the switch should appear ‘Memory integrity’from which it can be activated or deactivated. Microsoft recommends Re-enable this protection after playing if it has been disabled for more performance.
On some computers, however, the switch does not even appear even though Windows displays the kernel isolation section. In that case it is advisable to open the window Execute Windows by pressing the keys Windows + Rwrite ‘msinfo32’ and check if ‘Virtualization enabled in firmware’ figure as ‘Yeah’. When it appears as ‘No’it is necessary to enter the BIOS either UEFI and activate processor virtualization, usually called ‘SVM Mode’ in teams amd either ‘Intel Virtualization Technology’ on platforms Intel. Microsoft confirms that hardware virtualization must be enabled to use memory integrity.
It may also happen that Windows displays the option but prevents it from being activated due to to an incompatible driver. In this case, Microsoft recommends searching for an updated version of the device and, if it does not exist, deleting the device or the application that depends on it before trying again.