Aurora R13, Core Isolation Memory Integrity, off, turn on
Sunday morning and just poking around the computer. I noticed that the memory integrity is turned off. Quick research shows that a fresh Windows 11 install sets to off by default. I switched back on. Just a heads up.
Per Microsoft, should be set on as it isolates critical systems from attacks. If you cannot enable it, there is a driver conflict. Also, if you experience hardware issues, turn it off.
I also recently saw this appear (as a new feature) on a couple of my recent-model Windows-11 machines ... apparently after update to Windows-11 21H2 22000.918 (or there-abouts). As a new feature or capability of the OS, it defaults to Off/Disabled.
Most users don't even use the hardware-based Virtualization-Technology (VT) in their modern Intel processors ... see your "msinfo32" status. I'm not sure at this point, but I think it leverages the (normally unused) VT for Virtualization Based Security (VBS).
These Intel i7 and i9 as so powerful, I doubt you would see any real-world performance decrease for Windows desktop apps. I would think that most offices and people running mission-critical apps would consider turning it on. Usually (in these environments) more security is welcome.
However, I still wonder about it's performance-impact on about things like VR and high-end gaming ... or anything else that really gets the whole machine going.
There is also the talking-point that we managed to live without it until this point (but some users are better at "safe computing" than others). I've personally never been wrapped-up in a ransomware-event, but I know others who have been. Some parents allow their children to use their computers (and surf the open Internet) un-supervised ... and what about public computers at Libraries and the like?
Microsoft Windows and Apple iOS Developer (Retired) - Like many of you, I can appreciate a good game-engine. - I answer questions here, but I'm not a Dell employee. - Consider giving posts you like a "thumbs-up" - Posting models-numbers and software versions speeds trouble-shooting. - Click "Mark as Accepted Answer" on any post that answers your question best.
It was something I was not aware of and did some light investigating.
Looks like performance hit on gaming will be on the older generation processors. Most people on this forum have recent to new computers and any performance hit will be negligible. Microsoft highly recommends turning this on to all users. I have turned it on my R13 and have not noticed any hardware or operation issues so far.
Ransomware is one thing, the bigger one is hackers gaining access to your computer to add into as part of their network--think crypto mining--. Anti virust/anti malware is one thing...being hacked is another. Lots of people out there with evil intentions. If it does not hurt your system by turning it on, turn it on.
There is a software issue though. As Chansmith found out, enabling affects AWCC. While this is not a big issue to most people once you have set up the lighting and overclocking before enabling. To make any future changes, disable Memory Integrity to get AWCC working again.
I'm reading that people are having problems installing their slightly older (2 years old) Adobe programs with it turned on in Windows-11. They are saying that they have to temporarily turn-it off to get them installed. After they do that and reboot, they seem to be able to re-enable it and the programs run ok (as long as no Abobe auto-updates are started).
Dell Rockstar
Microsoft Windows and Apple iOS Developer (Retired) - Like many of you, I can appreciate a good game-engine. - I answer questions here, but I'm not a Dell employee. - Consider giving posts you like a "thumbs-up" - Posting models-numbers and software versions speeds trouble-shooting. - Click "Mark as Accepted Answer" on any post that answers your question best.
According to Dell, they are aware about the AWCC issue with Memory Integrity and is working on a solution. There are many users who use Alienware for both gaming and office work so this security feature is a must. Having to choose between AWCC and security should not be a choice. Toggle the Memory Integrity on/off requires a reboot. Good thing, does not affect AWCC after the reboots.
I've tried turning this on but it's not possible for some reason.
I just get "the page you are trying to access has no supported features and is not available" when clicking 'go to settings' on the Windows security page. Does that just mean my setup can't use this feature?
It depends on which PC you have, my Aurora R9 Intel Core i9-9900K CPU 3.60GHz Coffee Lake-S processor is not compatible with Windows 11 core isolation memory integrity. So I cannot turn on memory integrity on this PC and there is nothing Dell can do about it as it an Intel problem with this particular processor.
1. There are many users who use Alienware for both gaming and office work so this security feature is a must.
2. Having to choose between AWCC and security should not be a choice.
1. Well, it's not "a must" because your machine and office programs worked fine a few months ago without it.
2. Both my Aurora-R1 and Aurora-R6 run AW-CC and have plenty of security (and have for many years now). I run Microsoft Office 2021, QuickBooks Pro 2018, online banking, and even do my taxes on them. Seems fine to me.
Dell Rockstar
Microsoft Windows and Apple iOS Developer (Retired) - Like many of you, I can appreciate a good game-engine. - I answer questions here, but I'm not a Dell employee. - Consider giving posts you like a "thumbs-up" - Posting models-numbers and software versions speeds trouble-shooting. - Click "Mark as Accepted Answer" on any post that answers your question best.
Tesla1856
10 Wizard
•
18080 Posts
•
71927 Points
2481
0
Posted September 4th, 2022 10:00
I need to research this myself at some point.
I also recently saw this appear (as a new feature) on a couple of my recent-model Windows-11 machines ... apparently after update to Windows-11 21H2 22000.918 (or there-abouts). As a new feature or capability of the OS, it defaults to Off/Disabled.
Most users don't even use the hardware-based Virtualization-Technology (VT) in their modern Intel processors ... see your "msinfo32" status. I'm not sure at this point, but I think it leverages the (normally unused) VT for Virtualization Based Security (VBS).
These Intel i7 and i9 as so powerful, I doubt you would see any real-world performance decrease for Windows desktop apps. I would think that most offices and people running mission-critical apps would consider turning it on. Usually (in these environments) more security is welcome.
However, I still wonder about it's performance-impact on about things like VR and high-end gaming ... or anything else that really gets the whole machine going.
There is also the talking-point that we managed to live without it until this point (but some users are better at "safe computing" than others). I've personally never been wrapped-up in a ransomware-event, but I know others who have been. Some parents allow their children to use their computers (and surf the open Internet) un-supervised ... and what about public computers at Libraries and the like?
Here are a couple of resources for your research:
https://support.microsoft.com/en-us/windows/device-protection-in-windows-security-afa11526-de57-b1c5-599f-3a4c6a61c5e2
and
https://www.elevenforum.com/t/enable-or-disable-core-isolation-memory-integrity-in-windows-11.4942/
and
https://www.pcworld.com/article/539139/tested-heres-how-much-the-new-windows-security-features-hurt-pc-performance.html
Dell Rockstar
Microsoft Windows and Apple iOS Developer (Retired)
- Like many of you, I can appreciate a good game-engine.
- I answer questions here, but I'm not a Dell employee.
- Consider giving posts you like a "thumbs-up"
- Posting models-numbers and software versions speeds trouble-shooting.
- Click "Mark as Accepted Answer" on any post that answers your question best.