Disabling Hypervisor-Protected Code Integrity (HVCI) and Kernel Mode Code Integrity (KMCI) in Windows 11 might sound complex, but it’s simple when you know the steps. First, head to the Windows Security app, navigate to Device Security, and disable memory integrity. Then, use Group Policy Editor or PowerShell to turn off HVCI. Finally, restart your computer to apply these changes. Let’s dive into the detailed steps:
How to Disable HVCI and KMCI in Windows 11
Disabling HVCI and KMCI can help you run older drivers or software not compatible with these security features. Follow these steps to turn them off.
Step 1: Open Windows Security
Open the Windows Security app from the Start menu.
Windows Security is your go-to app for managing your computer’s security settings. Simply type “Windows Security” in the Start menu search bar and click on the app that appears.
Step 2: Navigate to Device Security
Click on “Device Security” in the left-hand menu.
In the Windows Security app, the Device Security section contains essential settings for securing your device. It’s located in the menu on the left side of the app window.
Step 3: Open Core Isolation Details
Click on “Core isolation details” under the Device Security section.
Core isolation provides virtualization-based security features in Windows 11. Clicking on “Core isolation details” will lead you to the settings you need to adjust.
Step 4: Disable Memory Integrity
Turn off the toggle switch for memory integrity.
Memory integrity helps prevent attacks from inserting malicious code into high-security processes. Disabling it allows less restrictive driver and software installations.
Step 5: Use Group Policy Editor to Disable HVCI
Open Group Policy Editor by typing “gpedit.msc” in the Run dialog (Win + R), then navigate to Computer Configuration > Administrative Templates > System > Device Guard, and disable the "Turn on Virtualization Based Security" setting.
Group Policy Editor lets you manage system policies. Disabling the “Turn on Virtualization Based Security” setting will turn off HVCI.
Step 6: Use PowerShell to Disable HVCI
Open PowerShell as an administrator and enter the command: bcdedit /set hypervisorlaunchtype off.
PowerShell is a powerful scripting tool in Windows. Running this command disables the Hypervisor, effectively turning off HVCI.
Step 7: Restart Your Computer
Reboot your system to apply these changes.
A system restart is required for the changes to take effect. Save any work before restarting.
After completing these steps, HVCI and KMCI will be disabled, allowing you to run older or incompatible drivers and software. Your system might be less secure, so be cautious about the software you install.
Tips for Disabling HVCI and KMCI in Windows 11
- Ensure you have administrative privileges before starting.
- Create a system restore point before making changes, just in case something goes wrong.
- Be aware that disabling these features can reduce your system’s security.
- Regularly update your drivers and software to the latest versions.
- Use caution when downloading and installing older drivers or software from untrusted sources.
Frequently Asked Questions
What is HVCI in Windows 11?
Hypervisor-Protected Code Integrity (HVCI) is a security feature that uses virtualization to ensure only trusted code runs in kernel mode.
Why would I want to disable HVCI and KMCI?
You might disable them to run older drivers or software that are not compatible with these security features.
Are there risks to disabling HVCI and KMCI?
Yes, disabling these features can reduce your system’s security by allowing potentially malicious code to run in kernel mode.
Can I re-enable HVCI and KMCI later?
Yes, you can re-enable them by reversing the steps outlined in this guide.
Will disabling HVCI and KMCI improve my computer’s performance?
Disabling these features might marginally improve performance, but the primary benefit is compatibility with older software and drivers.
Summary
- Open Windows Security.
- Navigate to Device Security.
- Open Core Isolation Details.
- Disable Memory Integrity.
- Use Group Policy Editor to disable HVCI.
- Use PowerShell to disable HVCI.
- Restart your computer.
Conclusion
Disabling HVCI and KMCI in Windows 11 is a straightforward process that can help you run older software and drivers. While it might make your system less secure, following the steps outlined in this guide ensures you can quickly adjust these settings as needed. Always remember to create a restore point before making changes and be cautious with the software you install afterward.
If you’re interested in further enhancing your Windows 11 experience, consider researching more about system optimization and security. And if you ever need to re-enable HVCI and KMCI, simply follow the reverse of the steps provided. Happy computing!
Matt Jacobs has been working as an IT consultant for small businesses since receiving his Master’s degree in 2003. While he still does some consulting work, his primary focus now is on creating technology support content for SupportYourTech.com.
His work can be found on many websites and focuses on topics such as Microsoft Office, Apple devices, Android devices, Photoshop, and more.