Maitiro ekugonesa VBS kubva kuEFI muWindows nhanho nhanho

Kugadziridza kwekupedzisira: 17/03/2025
munyori: Daniel Terrasa

  • Virtualization-yakavakirwa kuchengetedza (VBS) inosimudzira kuchengetedzwa kwehurongwa.
  • Kugonesa VBS kunoda UEFI uye TPM 2.0 inoenderana hardware.
  • Inogona kugoneswa kubva kuBIOS, Windows Registry, uye Group Policy.
  • Pane nzira dzekuona kana VBS yaitwa nemazvo.
VSB

La virtualization-based security (VBS) muWindows chinhu chinovandudza kuchengetedzwa kwehurongwa nekugadzira nharaunda yakachengeteka uye yakasarudzika. Asi nokuda Gonesa VBS kubva kuUEFI uye kutora mukana wechinhu ichi, zvinodikanwa kuti usangane nehumwe hardware uye zvigadziriso zvinodiwa muhurongwa hwekushandisa.

Muchinyorwa chino tinoongorora zvakadzama sei activate Virtualization-Yakavakirwa Chengetedzo kubva kuUEFI, ndeapi matanho ekutevera kuti atarise chimiro chayo uye maitiro ekugadzirisa zvinogona kuitika panguva yekugadziriswa.

Chii chinonzi Virtualization-Based Security (VBS)?

Virtualization-Yakavakirwa Chengetedzo (VBS) ari Windows kuchengetedza tekinoroji iyo inoshandiswa neiyo system hypervisor kugadzira nharaunda yakachengeteka mukati mendangariro. Nenzira iyi, yakakosha system data inodzivirirwa kubva kune zvinogona kutyisidzira. Ichi chimiro rinosimbisa kernel chengetedzo uye inodzikamisa kupinda kune zvisina mvumo maitiro.

Chimwe chezvinhu zvakakosha zveVBS ndeye Kuvimbika Kwendangariro, iyo inodzivirira kuurayiwa kwekodhi yakaipa nekutarisa chokwadi chevatyairi uye mafaira ehurongwa vasati vavabvumira kuti vamhanye.

Exclusive content - Click Here  Maitiro ekushandisa iyo Banco Azteca App

Zvinodikanwa kuti uite VBS

Usati wagonesa VBS kubva kuUEFI, ita shuwa kuti komputa yako inosangana nezvinotevera zvinodiwa:

  • UEFI Firmware: : Izvo zvinodiwa kuti BIOS igadziriswe kuUEFI modhi panzvimbo ye Legacy.
  • TPM 2.0: Iyo Yakavimbika Platform Module inofanirwa kuve yakagoneswa muBIOS.
  • Chengetedza Boot: Iyi sarudzo yeBIOS inofanira kugoneswa.
  • DMA Dziviriro: Inovandudza chengetedzo nekudzikamisa kupinda kune ekunze zvishandiso.

Kunze kweizvi, kutarisa kana system yako inoenderana neVBS, unofanirwa kutevedzera aya matanho:

  1. Shandisa nzira yekudimbudzira kiibhodhi Win + R, anonyora msinfo32 uye tinya pinda.
  2. Tsvaga chikamu «Virtualization-yakavakirwa kuchengetedza«. Kana ikaratidza se "Kumhanya," saka inenge yatoitwa.

Kana iwe uchida kudzidza zvakawanda nezve maitiro ekugonesa virtualization pane yako system, unogona kutarisa yedu gwara pa Gonesa hardware virtualization mukati Windows 11.

mhando dze bios

Maitiro ekugonesa VBS kubva kuBIOS (UEFI)

Kugonesa VBS kubva kuUEFI (kubva BIOS), tevera matanho aya:

  1. Tangazve komputa yako uye uwane iyo BIOS nekudzvanya F2, F10, Del kana Esc, zvichienderana nemugadziri.
  2. Mumenu yezvigadziriso, tsvaga iyo sarudzo "Boot Mode»uye kuchinja ku UEFI kana uchiri muLegacy mode.
  3. Tsvaga iyo sarudzo"TPM 2.0» uye woimisa kana isina kugoneswa.
  4. Gonesa iyo sarudzo «Chengetedza Boot".
  5. Sevha shanduko uye tangazve komputa.
Exclusive content - Click Here  Ndingatarise sei nguva yakatarwa yekusvika kwechitima muapp yechitima?

Gonesa VBS kubva kuWindows Registry

Kana iwe uchida kugonesa VBS uchishandisa iyo Windows Registry, ita zvinotevera:

  1. Press Win + R, anonyora regedit uye tinya pinda.
  2. Enda kune inotevera nzira:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard
  3. Tsvaga kana gadzira kukosha kweDWORD kunonzi "EnableVirtualizationBasedSecurity»uye inopa kukosha 1.
  4. Munzvimbo imwe chete, gadzirisa "InodaPlatformSecurityFeatures"ku 3 (yekuchengetedza boot uye DMA kudzivirira).
  5. Sevha shanduko uye wotangazve komputa yako.

Kugadzirisa VBS Uchishandisa Group Policy

Masisitimu maneja anogona zvakare kugonesa VBS vachishandisa Group Policy:

  1. Vhura iyo Group Policy Editor kunyora gpedit.msc mune yekutanga menyu.
  2. woenda ku Team setup.
  3. Ikoko tinosarudza Administrative templates> System> Device Guard.
  4. Vhura sarudzo «Gonesa virtualization-yakavakirwa kuchengetedza»uye sarudza «Inogoneswa".
  5. Kubva pane yekudonhedza pasi, sarudza "Inogoneswa neUEFI kukiya".
  6. Sevha shanduko uye tangazve komputa.

Maitiro ekutarisa kana VBS iri kushanda

Pane nzira dzakati wandei dzekusimbisa kana VBS yaitwa nemazvo:

  • Kushandisa msinfo32, uchitsvaga "Virtualization-Based Security" chikamu. Kana iri mu "Running" mode, saka inoshanda.
  • Kushandisa PowerShell, uchimhanyisa unotevera kuraira muPowerShell ine mvumo yemutungamiriri: (Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard).SecurityServicesRunning.Kana zvabuda zvichiratidza"2«, zvinoreva kuti VBS iri kushanda.
  • NeChiitiko Chekuona. Vhura chiitikovwr.msc uye enda ku "Windows Logs> System". Sefa ne "WinInit" kuti uone kana VBS yakagoneswa zvinobudirira.
Exclusive content - Click Here  Iyo VRV app inoshanda pane akangwara madivayiri here?
Gonesa VBS kubva kuUEFI
Maitiro ekugonesa VBS kubva kuEFI muWindows

Troubleshooting VBS Activation

Kana ukasangana nematambudziko paunenge uchiedza kumisa VBS kubva kuUEFI, edza zvinotevera mhinduro:

  • TPM 2.0 yakaremara: Pinda iyo BIOS uye ita shuwa kuti yakagoneswa.
  • Legacy Mode muBIOS: Chinja marongero kuUEFI.
  • Iyo sisitimu hairegi mushure mekuita: Dzima VBS kubva kuRegistry kana Group Policy uye reboot.
  • vatyairi vasingaenderani: Gadziridza vatyairi kubva kuMutariri weDhidhiyo.

Nekutevera nhanho idzi nenzira kwayo, iwe unofanirwa kukwanisa kugonesa VBS kubva kuUEFI, kureva kugonesa iyo virtualization-based security pasina matambudziko. Iyi tekinoroji chishandiso chakakosha chekusimudzira dziviriro yesystem yako kubva mukutyisidzira kwepamberi.