VBS enclaves deprecated on Windows 11 23H2 and earlier, but still supported in 24H2



 Deprecated Windows Features:

FeatureDetails and mitigationDeprecation announced
VBS enclaves for Windows 11, version 23H2 and earlierVBS enclaves are being deprecated on Windows 11, version 23H2 and earlier versions of Windows. Support for VBS enclaves will continue for Windows 11, version 24H2 and later.

[Update May 2025] Existing enclaves signed with the EKU 1.3.6.1.4.1.311.76.57.1.15 will continue to be supported for all Windows 11, version 23H2 and earlier versions of Windows, so long as no changes are made to the enclave that requires a re-sign of it. If a re-sign of the enclave occurs, the new EKU will be used to re-sign and the enclave will only be supported on Windows 11, version 24H2 and later. Existing enclaves signed with EKU 1.3.6.1.4.1.311.76.57.1.15 will continue to function without disruption on the following operating systems until a re-sign is needed:
  • Windows 10, version 22H2
  • Windows 11, version 22H2
  • Windows 11, version 23H2
  • Windows 11, version 24H2 and later
April 2025


 Source:

 

Latest Support Threads

Back
Top Bottom