Standard hardware security not supported

Hello all, I recently reset my PC using the Settings -> System Recovery feature, and using the remove everything option. After that completed, Windows Security displays the message "Standard hardware security not supported." This is new.

I reviewed Elisyan's post here and have a similar issue. Windows Security says "Memory integrity is off. Your device may be vulnerable." I get the same error when I click on settings and same message when I click device security. I ran sfc /scannow and the first time it found errors, but now it does not. I have also run dism /online /cleanup-image /restorehealth and restarted and there has been no change.

I have run tpm.msc and it says "The TPM is ready for use" On HWiNFO, I see UEFI Boot, Secure Boot, and TPM, are green and enabled, while HVCI is grayed out.

I went to enable or disable core isolation, here, and looked at the path and I did not have a registry entry besides default, and I added the file to the registry. After a restart, Windows Security now has a green check and HWiNFO now has HVCI green, but clicking on Windows Security still gives the same message, "Standard hardware security not supported" I also checked paulpchou's post here, Windows Security Service is running.

Bitlocker on for all drives and Samsung's encrypted drive set to ready to enable.

Windows Security Application Version: 1000.25183.0.1000
Antimalware Client Version: 4.18.2209.7
Engine Version: 1.1.19700.3
Antivirus Version: 1.377.940.0
Antispyware Version: 1.377.940.0

Any help appreciated.

Did you verify virtualization is enabled in firmware?

neemobeer said:

Did you verify virtualization is enabled in firmware?

Click to expand...

In the bios, under the virtualization tab, I have both Intel Virtualization Technology (VT) and VT for Direct I/O set to ON.

Have you installed Windows Hypervisor Platform from "windows add features" menu.

You need this added if trying to turn on Defender Credential Guard".

You do not need it if you have Hyper-V installed though.

cereberus said:

Have you installed Windows Hypervisor Platform from "windows add features" menu.

You need this added if trying to turn on Defender Credential Guard".

You do not need it if you have Hyper-V installed though.

Click to expand...

I did not have the WHP option installed. I installed it but still have the same message. I do not have Hyper-V installed. The current Windows features on:
.Net Framework 3.5 and 4.8 (partial)
Media Features
Microsoft Print to PDF
Print and Document Services
Remote Differential Compression API Support
SMB Direct
Windows Hypervisor Platform (new)
Windows PowerShell 2.0
Work Folders Client

Am I missing anything here?

Those look like mine except I have file sharing on. I did enable virtualization in firmware. Have you checked with Dell to see if you have the latest bios installed?
You can check manually from their site OR if you have Dell Command Update installed use it to check for updated drivers and firmware. That's what I use.

glasskuter said:

Those look like mine except I have file sharing on. I did enable virtualization in firmware. Have you checked with Dell to see if you have the latest bios installed?
You can check manually from their site OR if you have Dell Command Update installed use it to check for updated drivers and firmware. That's what I use.

Click to expand...

I have the latest bios (1.18.0) and in the bios, under the virtualization tab, I have both Intel Virtualization Technology (VT) and VT for Direct I/O set to ON.

In Windows' system information, the system summary says:
BIOS Mode: UEFI
Secure Boot State: ON
Kernel DMA Protection: Off
Virtualization-based security: Running
Virtualization-based security Required Security Properties: [blank]
Virtualization-based security Available Security Properties: Base Virtualization Support, Secure Boot, DMA Protection, EUFI Code Readonly, SMM Security Mitigations 1.0, Mode Based Execution Control, APIC Virtualization
Virtualization-based security Services Configured: [blank]
Virtualization-based security Serivces Running: Credential Guard
Windows Defender Application Control policy: Enforced
Windows Defender Application Control user mode policy: Audit
Device Encryption Support: Meets prerequisites
A hypervisor has been detected. Features required for Hyper-V will not be displayed

It appears to be a known bug. Windows 11 22H2 build 22621 bug shows "hardware security not supported" on supported PCs

Go to the feedback hub and do a search for 'standard hardware security'. You can read MS's official response. You might want to throw your complaint in while you are there.

glasskuter said:

It appears to be a known bug. Windows 11 22H2 build 22621 bug shows "hardware security not supported" on supported PCs

Go to the feedback hub and do a search for 'standard hardware security'. You can read MS's official response. You might want to throw your complaint in while you are there.

Click to expand...

Thanks. One individual on the feedback hub said doing a clean re-install via usb and not using the cloud download did the trick for them. I will wait a bit before trying this in the hopes that a patch will come out soon.

Is that funny right? Windows Security but always have bugs... So is it security or not security? Should users believe in Microsoft Windows Security?

DansElevenForum said:

Thanks. One individual on the feedback hub said doing a clean re-install via usb and not using the cloud download did the trick for them. I will wait a bit before trying this in the hopes that a patch will come out soon.

Click to expand...

Confirmed.

DansElevenForum said:

Confirmed.

Click to expand...

Same here installation in cloud version Beta

So I have a fix for this but a bit complicated



First thing, you need to downgrade to Windows 10 by downloading it



Then, when you finish setting up everything, go to the Device Security tab by accessing the Windows Security



After that, go to the Core Isolation and scan for Incompatible Drivers and uninstall it (Using CMD or search the file in File Explorer and delete it (Might need to edit the access permission)). Check again and see if there are incompatible drivers. If not, enable it and restart the computer.



Finally, update the computer to Windows 11. And if you get the error that keeps rolling back your Windows Installation when you are trying to install Windows 11, reset the Windows 10 and try again (This worked for me)



I think this is a bug in Windows 11 newest version (Version 22H2 (OS Build 22621.963)) and this is the way that it works for me. If you try to download the ISO File of Windows 11 to fix it, but most likely that it will not work but in case I will put a link below:



- Download Windows 11


Also, some Computers/Laptops cannot access the Group Policy (Although using Win + R). Here are the links that I found working:

- Enable Group Policy Editor (gpedit.msc) in Windows 10 & 11 Home Edition - MajorGeeks

- https://www.ghacks.net/2021/11/29/h...art button and,access the Group Policy Editor.

- How to Enable Gpedit.exe in Windows 11 [Quick Guide]


How to enable Core Isolation through Regedit (If this works for you):



- How (and why) to enable Core isolation's Memory integrity feature to enhance security on Windows 11 - OnMSFT.com


Thank you for reading



PS: You need to turn on Virtualization in BIOS

I got that message before, it's because of Secure Boot being disabled by the UEFI-BIOS, IIRC, just because I changed from one Ryzen 5000 series CPU to another Ryzen 5000 series CPU! (which are of the same main generation (Vermeer) )