# Virtualization Based Security

## 🔧 How to Disable VBS in BIOS <a href="#how-to-disable-vbs-in-bios" id="how-to-disable-vbs-in-bios"></a>

***

## 📌 Step 1: Check Whether VBS is Enabled <a href="#step-1-check-whether-vbs-is-enabled" id="step-1-check-whether-vbs-is-enabled"></a>

Before changing anything, verify if VBS is enabled:

1. Press `Windows + R`, type `msinfo32`, and press Enter.
2. In the System Information window, scroll down and look for:
   * **Virtualization-based Security** → If it says "Running", it's enabled.
   * **Device Guard** and **Credential Guard** may also be relevant.

***

## 🔧 Step 2: Turn Off Core Isolation in Windows (Optional but Recommended) <a href="#step-2-turn-off-core-isolation-in-windows-optional-but-recommended" id="step-2-turn-off-core-isolation-in-windows-optional-but-recommended"></a>

1. Open **Settings** → **Privacy & Security** → **Windows Security**.
2. Click **Device Security**.
3. Under **Core Isolation**, click **Core isolation details**.
4. Turn **Memory Integrity** to **Off**.
5. Reboot the system.

***

## 🖥 Step 3: Enter BIOS/UEFI Settings <a href="#step-3-enter-bios-uefi-settings" id="step-3-enter-bios-uefi-settings"></a>

1. Reboot your PC.
2. During startup, press the correct key to enter BIOS/UEFI (common keys: `Del`, `F2`, `F10`, `Esc`, or `F12` depending on your motherboard or PC brand).
3. If unsure, look for a message like “Press F2 to enter Setup” during boot.

***

## ⚙️ Step 4: Disable Virtualization Features in BIOS <a href="#step-4-disable-virtualization-features-in-bios" id="step-4-disable-virtualization-features-in-bios"></a>

Inside the BIOS/UEFI interface:

1. Navigate to **Advanced**, **Security**, or **CPU Configuration** section (varies by manufacturer).
2. Look for and disable the following options:
   * **Intel Virtualization Technology (VT-x)** or **AMD-V**
   * **Intel VT-d** (for I/O virtualization)
   * **SVM Mode** (on AMD systems)
   * **Memory Protection Extensions (MPX)**
   * **Hyper-V** or **Virtualization Support**

> 📌 Tip: The exact names may differ by motherboard (check manual or on-screen help).

1. Save changes and exit (usually `F10`, then confirm "Yes").

***

## 🔁 Step 5: Reboot and Confirm <a href="#step-5-reboot-and-confirm" id="step-5-reboot-and-confirm"></a>

1. After the system restarts, open `msinfo32` again.
2. Confirm that **Virtualization-based Security** is now **Not enabled**.

***

## **📝 Additional Notes**

* On some systems (like laptops from Dell, HP, Lenovo), BIOS settings may be under vendor-specific menus like:
  * **System Configuration**
  * **Advanced Security**
  * **Virtualization Technology**
* You might also need to disable **Secure Boot** in BIOS if it's tied to VBS.
* If the VBS settings still persist, you may need to adjust Group Policy or Registry settings in Windows. Let me know if you need those steps too.