What Is Memory Integrity (HVCI) in Windows 11?

Hypervisor-Protected Code Integrity (HVCI), known as Memory Integrity in the Windows user interface, is a vital hardware-assisted security feature in Windows 11 designed to protect the operating system’s core kernel from sophisticated malware and cyberattacks. By using virtualization technology, Memory Integrity isolates the code verification process inside a secure environment, preventing attackers from injecting malicious code or running unsigned, vulnerable drivers in high-privilege system areas.

Understanding Memory Integrity and HVCI

HVCI works as a critical component of Virtualization-Based Security (VBS). In standard operating systems, the kernel operates with the highest level of privilege. If malicious software compromises the kernel, it gains complete control over the entire device.

Memory Integrity prevents this by running the code integrity verification process inside a secure virtual container created by the Windows hypervisor. Even if an attacker attempts to inject malicious code into system memory, HVCI ensures that only cryptographically signed and verified code is permitted to execute in the kernel.

How Memory Integrity Protects Your System

Memory Integrity provides deep-level defense against modern security threats through several key mechanisms:

• Kernel Attack Prevention: It prevents unauthorized modifications to system memory pages, blocking exploits that attempt to alter kernel-mode code.
• Driver Validation: It ensures that only trusted, verified, and signed hardware drivers are loaded, eliminating threats from compromised or outdated third-party drivers.
• Credential Protection: By securing the kernel space, it defends against tools designed to extract sensitive user credentials and security tokens from memory.
• Zero-Day Defense: Because verification happens in an isolated hardware layer, it stops unknown exploits from hijacking the operating system.

System Requirements for Windows 11

To run Memory Integrity, a Windows 11 device requires specific hardware support:

• A compatible 64-bit processor (Intel, AMD, or ARM) with virtualization support.
• Hardware virtualization enabled in the BIOS/UEFI (Intel VT-x or AMD-V).
• Second Level Address Translation (SLAT).
• Secure Boot enabled.
• TPM 2.0 (Trusted Platform Module).
• Fully compatible and digitally signed device drivers.

How to Enable Memory Integrity in Windows 11

Memory Integrity is enabled by default on new Windows 11 installations and compatible hardware. To verify or toggle the setting manually:

1. Open the Start Menu and launch Windows Security.
2. Select Device security from the left navigation panel.
3. Under the Core isolation section, click Core isolation details.
4. Locate Memory integrity and toggle the switch to On.
5. Restart your computer to apply the changes.

If an incompatible driver is detected on the system, Windows 11 will prevent the feature from turning on and display a list of the conflicting drivers, allowing you to update or remove them before enabling protection.