Windows Virtualization-based Security (VBS) service Hypervisor-Protected Code Integrity (HVCI) is not listed in the running services in System Information (msinfo32) in Windows VM running on ESXi 7.0.3 when “Require UEFI Memory Attributes Table” is selected in guest OS.
The virtual EFI firmware does not provide NX information correctly to the guest OS.
The issue has been resolved in VMware vSphere 7.0 Update 3l.
To workaround the issue, please follow the below mentioned steps:
Option1: When enabling HVCI via local group policy, do not select “Require UEFI Memory Attributes Table”.