Jump to content
Kaspersky Support Forum

Kaspersky claims Hardware virtualization is not available — except it is avaiailable. Now what?

Raiden

By Raiden
in Kaspersky Security Cloud

 Share
Go to solution Solved by Schulte,

Recommended Posts

Raiden

Raiden

Posted
  • Author
Posted

On my notification I am redirected to a Kaspersky website page where I'm told I have to enable virtualization in the BIOS. Except it's already enabled and I have checked and rechecked it. systeminfo also confirms I have it.

 

Untitled.png

  • Like 1
Schulte

Schulte

Posted
Posted

Hello @Raiden,

in Windows only one hypervisor can be active at a time.
Some Windows features use a hypervisor themselves, e.g. 'Device Guard'. Is this one enabled?

  • Like 3
Raiden

Raiden

Posted
  • Author
Posted

 

I have

3 minutes ago, harlan4096 said:

https://support.kaspersky.com/us/common/safemoney/13713

been there already (that is the website that a link in the antivirus notification takes you) and like I said I am 100% sure that I have it enabled it. FYI that website has no information other than how to enable it in BIOS in case it is disabled. That's why I opened this thread.

  • Like 1
Raiden

Raiden

Posted
  • Author
Posted (edited)
26 minutes ago, Schulte said:

Hello @Raiden,

in Windows only one hypervisor can be active at a time.
Some Windows features use a hypervisor themselves, e.g. 'Device Guard'. Is this one enabled?

What is "Device Guard"?

I only have Kaspersky on my Windows 11 as far as antivirus program is concerned. There is of course Microsoft's own built-in antivirus but that one is turned off automatically when Kaspersky is turned on.

 

 

 

Edited by Raiden
  • Like 1
harlan4096

harlan4096

Posted
Posted

Probably the cause is one of these 2:

 

image.png.46564af77cfc53f9732fa2218a5f6745.png

 

Any Windows 11 feature that uses Device Guard, Windows Hyper-V enabled... or Windows SandBox enabled, I think also Linux subsystem also need Hyper-V enabled (not sure), will lead to a warning of Kaspersky own Hyper-V / Hardware virtualization protection.

  • Like 2
Raiden

Raiden

Posted
  • Author
Posted
22 minutes ago, harlan4096 said:

Probably the cause is one of these 2:

 

image.png.46564af77cfc53f9732fa2218a5f6745.png

 

Any Windows 11 feature that uses Device Guard, Windows Hyper-V enabled... or Windows SandBox enabled, I think also Linux subsystem also need Hyper-V enabled (not sure), will lead to a warning of Kaspersky own Hyper-V / Hardware virtualization protection.

I don't have "device guard". Never heard of it. Not available in my machine.

My Windows is the normal version that people buy in shops and use at home (aka Home edition) not server or enterprise or whatever other Windows versions that exist out there.

  • Solution
Schulte

Schulte

Posted
  • Solution
Posted

Hello @Raiden,

'Device Guard' is now integrated into MS Defender.

Can you please check if 'Memory Integrity' is enabled under 'Settings > Update & Security > Windows Security > Device security > Core isolation details'? (Windows-Settings!)
This will enable 'Hypervisor-protected code integrity (HVCI)', then Kaspersky cannot use virtualization.

  • Like 6
Raiden

Raiden

Posted
  • Author
Posted
11 hours ago, Schulte said:

Hello @Raiden,

'Device Guard' is now integrated into MS Defender.

Can you please check if 'Memory Integrity' is enabled under 'Settings > Update & Security > Windows Security > Device security > Core isolation details'? (Windows-Settings!)
This will enable 'Hypervisor-protected code integrity (HVCI)', then Kaspersky cannot use virtualization.

Yes THAT's what I wanted. Precise answer. Thank you.

Finally something I recognize: Core Isolation in my settings, not "device guard".

I disabled core isolation's "memory integrity" switch and the antivirus finally sorted itself out.

  • Like 1
harlan4096

harlan4096

Posted
Posted

Yes, I forgot also that feature, Windows Core Isolation also seems incompatible with K. HyperVisor, because probably it uses some shared security features...

Raiden

Raiden

Posted
  • Author
Posted (edited)
7 minutes ago, harlan4096 said:

Yes, I forgot also that feature, Windows Core Isolation also seems incompatible with K. HyperVisor, because probably it uses some security features of Microsoft HyperV...

You forgot because Kaspersky has NOT put such an important piece of information in their info page (that the anti virus tells us to read):

https://support.kaspersky.com/us/common/safemoney/13713

That info page needs to be updated ASAP. Also in another area: the "Windows 10" subtitle is already outdated (since early last year already we have another Windows version on the market: Windows 11 so it should read "Windows 10 & 11"

 

Edited by Raiden
  • Like 3
Raiden

Raiden

Posted
  • Author
Posted (edited)

I decided to remove Kaspersky.

Because while this core isolation problem was solved, I discovered a new problem while trying to solve that: Kaspersky conflicts with AdGuard (an anti ad protection program that I have on my computer). Specifically I had set up AdGuard to be my DNS resolver instead of the usual (Windows Settings > Network & Internet). The reason is because I don't want to change the Windows's basic DNS settings - I want that to remain "Automatic" by default so I don't get connection problems with some public networks.

So I want to continue using AdGuard. Which means I have no choice but to stop using Kaspersky Security Cloud. Because KSC has no option to "allow" me to use AdGuard HTTP / DNS protection side by side (something I can do with AdGuard + Windows Defender).

Edited by Raiden
  • 2 weeks later...
Raiden

Raiden

Posted
  • Author
Posted

Now I reinstalled Kaspersky SC after tweaking AdGuard.

All problem solved — mission accomplished.

  • Like 1
  • 4 years later...
Alex D

Alex D

Posted
Posted (edited)

have the same problem

Kaspersky Premium 21.25.7.504(a)

OS Name:                       Microsoft Windows 11 Pro
OS Version:                    10.0.26200 N/A Build 26200
System Type:                   x64-based PC
Processor(s):                  1 Processor(s) Installed.
                               [01]: AMD64 Family 26 Model 68 Stepping 0 AuthenticAMD ~4700 Mhz
BIOS Version:                  American Megatrends International, LLC. 1.A77, 10.09.2025
Virtualization-based security: Status: Running
                               Required Security Properties:
                                     Base Virtualization Support
                               Available Security Properties:
                                     Base Virtualization Support
                                     Secure Boot
                                     DMA Protection
                                     UEFI Code Readonly
                                     SMM Security Mitigations 1.0
                                     Mode Based Execution Control
                               Services Configured:
                               Services Running:
                               App Control for Business policy: Enforced
                               App Control for Business user mode policy: Off
                               Security Features Enabled:
Hyper-V Requirements:          A hypervisor has been detected. Features required for Hyper-V will not be displayed.

Memory Integrity in MS Defender is disabled

But Kaspersky Application still say
Hardware virtualization is not available 

Can you please provide any suggestions ?

also, one more question
you really think protected browser is better than 
MS Defender Memory Integrity + Kernel-Mode Hardware-Enforced Stack  Protection ?

and if yes, why ? can you please provide more details

Edited by Alex D
harlan4096

harlan4096

Posted
Posted

Do You have all options in Windows 11 Core Isolation disabled?

 

Quote

also, one more question
you really think protected browser is better than 
MS Defender Memory Integrity + Kernel-Mode Hardware-Enforced Stack  Protection ?

 

K. Hardware Virtualization it is only applied to K. protected browser session.

 

W11 Core Isolation options are applied to the full system.

  • Like 1
AlexeyK

AlexeyK

Posted
Posted

@Alex D At least these features should be disabled (maybe smth else):

1. Virtualization-based security: Status: Running (how-to)

2. A hypervisor has been detected. (how-to)

  • Like 2
Alex D

Alex D

Posted
Posted
4 hours ago, harlan4096 said:

Do You have all options in Windows 11 Core Isolation disabled?

yes, when we disable Memory Protection, all Core Isolation features disabled automatically

 

4 hours ago, harlan4096 said:

K. Hardware Virtualization it is only applied to K. protected browser session.

W11 Core Isolation options are applied to the full system.

yes, agree, this why I thinking W11 Core Isolation enable options is better than disable it for support K. Hardware Virtualization

but may be Im wrong

  • Like 1
harlan4096

harlan4096

Posted
Posted

Agree, and specially in my main system where I'm using KES 14, so no Safe Money feature, but I use SandBoxie Free sometimes.

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
 Share
Go to topic listing


×
×
  • Create New...