Memory Integrity is part of Windows Core Isolation and helps protect your system from blocking malicious attacks. It relies on your CPU hardware virtualization to create a secure environment. Begin with Step 1, then use what you discover to continue troubleshooting.

Step 1: Check if Memory Integrity is Enabled

Let's check if HVCI/VBS is already running on your system.

  1. Press Windows Key + R to open the Run window.
  2. Type msinfo32 and hit Enter.
  3. Scroll to the bottom of System Summary and look for Virtualization-based security.
If VBS is Running: You’re good to go!


If you're still getting kicked, check the VAN: RESTRICTION guide. 

If VBS is Enabled but not running:


VBS is configured but not active. This usually means virtualization isn't enabled in your BIOS. Skip to Step 3 to enable it. 

If VBS is Not Enabled:


VBS isn't turned on at all. Proceed to Step 2 to enable Memory Integrity through Windows, then check if you also need Step 3 for BIOS changes. 

 

Step 2: Enable Memory Integrity (Core Isolation) in Windows

You can enable Memory Integrity using the steps below once BIOS Virtualization is active.

  1. Click the Windows Start menu, then ⚙️Settings.
  2. Go to Update & Security > Windows Security > Device Security.
  3. Under Core isolation, find Memory Integrity.
  4. Toggle the switch on.
  5. Restart your system when prompted.

Note: If the toggle is grayed out or you get an error about incompatible drivers, see the Troubleshooting section below.

Step 3: Enable Virtualization in BIOS

If you're unable to locate the settings described, your BIOS may be outdated or your device manufacturer may use different naming conventions: Update BIOS Firmware (AMD/Intel). Note that some systems may not expose these settings at all, depending on the hardware and BIOS version available.

IMPORTANT: About editing your BIOS settings

If you’re not familiar with navigating through your BIOS, please reach out to a professional. Incorrectly configuring BIOS settings can cause issues with your computer–including failure to start up.

The BIOS is highly variable depending on the brand and type of computer or motherboard you are using, so we highly recommend that you reach out to your computer or motherboard manufacturer's support resources for assistance.

VBS requires hardware virtualization to be enabled in your BIOS. If Memory Integrity won't turn on, or VBS shows "enabled but not running," it's likely not enabled in BIOS. 

Before you begin, you'll need to access your computer's BIOS/UEFI settings.

Windows 11

 

  1. Open Settings
  2. Go to System > Recovery
  3. Under Advanced startup, select Restart now
  4. After your PC restarts, select Troubleshoot > Advanced options > UEFI Firmware Settings
Windows 10

 

  1. Open Settings
  2. Go to Update & Security > Recovery
  3. Under Advanced startup, select Restart now
  4. After your PC restarts, select Troubleshoot > Advanced options > UEFI Firmware Settings


Or, you can restart your PC and press Del, F2, or F10 before Windows loads. (Varies by computer) 

Once you're in BIOS, locate your CPU or virtualization settings. The BIOS layout varies wildly depending on the motherboard or PC manufacturer; if you cannot find the settings listed below, please visit your specific manufacturer's support website and search their manuals for “How to enable Virtualization.”

Intel Systems

 

  1. Navigate to Advanced > CPU Configuration (or Security on some systems)
  2. Set Intel Virtualization Technology (VT-x) to Enabled
  3. Set Execute Disable Bit (XD) to Enabled
  4. Save your changes and exit BIOS (usually F10)
AMD Systems

 

  1. Navigate to Advanced > CPU Configuration, OC, or AMD CBS
  2. Set SVM Mode (Secure Virtual Machine) to Enabled
  3. Set NX Mode to Enabled
  4. Save your changes and exit BIOS (usually F10)
Other specific virtualization guides listed by manufacturer

 

 

Step 4: Confirm It Worked

Once Windows boots back up, run this check to see if it was successful:

  1. Press Windows Key + R, type msinfo32, hit Enter.
  2. Scroll to the bottom of System Summary.
  3. Confirm Virtualization-based security says Running.
  4. Confirm Virtualization-based security Services Running includes Hypervisor enforced Code Integrity.

Quick check: You can also verify virtualization is active by opening Task Manager > Performance tab > CPU. In the bottom-right you should see Virtualization: Enabled. If it says "Disabled," go back to Step 3.

If both 3 and 4 look right — you're done. The queue awaits!

Additional HVCI/VBS Troubleshooting

If you run into any issues while taking the above steps, check below for additional help.

Core Isolation page shows “Page not available” or won’t open?


Some Windows configurations hide the Core Isolation page. These methods might solve your problem:

  • Update Windows (an outdated build can cause this): Press Windows Key + R, type winver to check. Update Windows if needed.
  • Try the direct path: Settings > Privacy & Security > Windows Security > Device Security > Core isolation details.
  • Use the registry method instead: See the "Alternative: Enable via Command Prompt" dropdown in Step 2.
Memory Integrity toggle is grayed out or shows incompatible drivers?


An incompatible kernel-mode driver is blocking Memory Integrity from enabling. Windows will usually tell you which driver is the problem.

  1. Click Review incompatible drivers in the Core isolation page (if shown).
  2. Note the driver name and publisher.
  3. Check if there's an updated version from the manufacturer — often older anti-cheat, RGB software, or hardware drivers cause this.
  4. If the driver is from software you no longer use, uninstall it.
  5. Restart and try toggling Memory Integrity on again.

You can also scan for problematic drivers with an elevated Command Prompt:

  • dism /online /get-drivers /format:table
VBS shows "enabled but not running” after BIOS changes?


A few things can cause this:

  • Virtualization not actually enabled: Double-check your BIOS — the setting name varies. Re-check the Intel/AMD dropdowns in Step 3.
  • Hyper-V not installed: VBS needs the Windows Hypervisor. Open Turn Windows features on or off and make sure Hyper-V (or at minimum Windows Hypervisor Platform) is checked.
  • Incompatible drivers: A driver blocking HVCI can prevent VBS from fully starting. Check the Core Isolation page in Windows Security for driver warnings.
Getting a blue screen after enabling Memory Integrity?


A driver that's incompatible with HVCI can cause a blue screen (BSOD) at boot. To recover: 

  1. Boot into Windows Recovery Environment (it should appear automatically after failed boots, or use a USB recovery drive).
  2. Go to Troubleshoot > Advanced options > Command Prompt.
  3. Run: reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Enabled" /t REG_DWORD /d 0 /f
  4. Restart your PC — Memory Integrity will be disabled so Windows can boot.
  5. Once in Windows, update or remove the incompatible driver, then re-enable Memory Integrity.
My CPU doesn’t support virtualization.


VBS requires a CPU with hardware virtualization support. Most CPUs from 2015 onward support it. If your CPU genuinely doesn't support VT-x (Intel) or SVM (AMD), your hardware is not compatible with Vanguard's requirements.

You can verify your CPU's capabilities by checking your model on the manufacturer's website:

  • Intel ARK — search your CPU and look for “Intel Virtualization Technology (VT-x)”
  • AMD Product Specs — look for "Virtualization" under your CPU's features