How to Enable Memory Integrity on Windows Virtual Machines in vSphere

Products

• VMware vCenter Server

Issue/Introduction

When attempting to enable the Windows Security "Memory Integrity" feature on a Windows virtual machine, the setting does not take effect.
If you reboot the virtual machine with the feature enabled, you will see that the setting reverts to its disabled state.

Environment

VMware vSphere 7.x
VMware vSphere 8.x

Resolution

The Windows "Memory Integrity" feature requires that the underlying Virtualization-based Security (VBS) be enabled at the virtual machine level.

Enable Virtualization-based Security on an Existing Virtual Machine

Follow the steps below to enable VBS for the target virtual machine via the vSphere Client:

1. Log in to the vSphere Client with administrative privileges.

2. Power OFF the virtual machine.

3. Right-click the virtual machine and select [Edit Settings].

4. Select the [VM Options] tab.

5. Under [Virtualization Based Security], select the [Enable] check box and click [OK].

   • 

6. Power ON the virtual machine.

7. Navigate to the [Summary] tab of the virtual machine. In the [Virtual Machine Details] tile, verify that [Virtualization Based Security - Enabled] is displayed.

Additional Information

vSphere 上の Windows 仮想マシンでメモリ整合性を有効化する方法