Hypervisor-Protected Code Integrity (HVCI) is a Windows security feature that helps protect against kernel-level attacks. Checking if your PC supports HVCI is straightforward using built-in tools and Microsoft utilities. This guide explains the steps and requirements clearly.
Check HVCI Support Using Windows Security Settings
- Open Settings (Windows Key + I), then go to Privacy & Security, then Windows Security, and open Windows Security.
- Click Device Security, then Core Isolation Details.
- Look for Memory Integrity:
- If listed, your system supports HVCI.
- If it is off, try enabling it. If it fails to turn on, your system may have incompatible drivers or unsupported hardware.
Check Compatibility with HVCIScan.exe
Microsoft also provides a dedicated tool called HVCIScan.exe to check for driver and hardware compatibility with HVCI. It is available for Windows 10, Windows 11, and Windows Server editions.
HVCI Requirements
To support and enable HVCI, your system must meet the following prerequisites:
- UEFI firmware with Secure Boot enabled.
- Hardware virtualization: Intel VT-x or AMD-V.
- SLAT (Second Level Address Translation): Intel EPT or AMD RVI.
- TPM 2.0 is recommended for full feature support.
- Compatible drivers: Incompatible kernel-mode drivers may prevent HVCI from functioning.
Additional Notes
- Older CPUs may emulate some features using Restricted User Mode, but this can lead to performance degradation.
By checking Windows Security settings and confirming hardware requirements, you can determine whether your PC supports HVCI. Meeting these prerequisites ensures stronger protection against kernel-level threats and better compatibility with modern Windows security features.