Enabling Windows Virtualization Based Security by default via VM templates

Products

• VMware vCenter Server 8.0

Issue/Introduction

When creating a new Virtual Machine, the option Enable Windows Virtualization Based Security (VBS) is unchecked by default. Currently, the system does not allow administrators to modify the global default behavior to have this option pre-selected.

Cause

The default state of the Enable Windows Virtualization Based Security option is predefined within the virtual machine creation workflow. vCenter Server does not provide a global configuration parameter or policy setting to modify this default selection state.

Resolution

Since the default selection state cannot be changed, it is suggested to create a VM Template with VBS already enabled：

1. Create a new virtual machine.
2. During the configuration phase, manually check the box for Enable Windows Virtualization Based Security.
3. Complete the VM creation process.
4. Power off the virtual machine.
5. Right-click the VM and select Convert to Template.
6. When creating new virtual machines, select Deploy VM from Template and choose the template with VBS enabled.