Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizen Coje_He for the clue delivery! CTOnews.com, November 25 (Xinhua) since the launch of Win11, Microsoft has repeatedly stressed that security is the cornerstone of the new operating system. As a result, Win11 significantly raises the device threshold, requiring devices to meet conditions such as TPM 2.0 and Virtualization-based Security (Core Isolation).

Microsoft Azure and Windows OS Platform PM manager Jin Lin wrote a new blog post that Microsoft can further enhance the security of Win11 22H2 by deploying Intel's Total Memory Encryption-Multi-Key (TME-MK) technology.

CTOnews.com learned that TME-MK technology is only supported on Intel's third-generation Xeon scalable Ice Lake processors and subsequent models in terms of server CPU, and only on Intel's 12th-generation Alder Lake processors and subsequent models on desktop-side CPU.

TME-MK has been used in Intel Xeon 3 server processors and Intel 12 generation Kerry client processors. Azure, Azure Stack HCI and now the Windows 11 22H2 operating system also take advantage of this new generation of hardware features. TME-MK is compatible with Generation 2 VM version 10 and subsequent versions.

To start a new virtual machine with TME-MK protection (assign it a unique encryption key that is different from other partitions), use the following PowerShell cmdlet.

Set-VMMemory-VMName-MemoryEncryptionPolicy EnabledIfSupported to verify that the running virtual machine is enabled and use TME-MK for memory encryption, you can use the following Powershell cmdlet.

Get-VmMemory-VmName | fl * if the virtual machine is protected by TME-MK, the following values are returned:

MemoryEncryptionPolicy: EnabledIfSupportedMemoryEncryptionEnabled: True

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.