How to activate Firmware protection?

[Solitario]

Hello everyone, I am having this problem, I can't activate the firmware protection function, is it because my processor is not compatible? I have a R5 3600. Well if you can help me very grateful in advance.

Best regards.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard]
"CachedDrtmAuthIndex"=dword:00000000
"RequireMicrosoftSignedBootChain"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\CredentialGuard]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity]
"WasEnabledBy"=dword:00000002
"Enabled"=dword:00000001
"EnabledBootId"=dword:00000006
"ChangedInBootCycle"=hex(b):92,e9,bc,4d,d5,24,d9,01

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\SystemGuard]
"Enabled"=dword:00000001
"Managed"=dword:00000001

 

[xilolee]

Hi!

Specs?

 

[Solitario]

Hello.
Ryzen 5 3600
B450M DS3H V2

Edition Windows 11 Pro
Version 22H2
Compilation SO 22621.1848
Windows Feature Experience Pack 1000.22642.1000.0

thank you. All the best.

 

[xilolee]

Try the following tool and post the results: Download Device Guard and Credential Guard hardware readiness tool from Official Microsoft Download Center

 

[Solitario]

I'm not sure what happened when I ran that script but I had to use Macrium. I'll leave it as is for now. You can close the topic. Thank you very much. Best regards.

 

[Solitario]

Hi Searching, I found this.
How a Windows Defender System Guard helps protect Windows - Windows Security

I have a Ryzen 9 3900 now, I think is for that I can't activate this feature.

Thank you very much.
All the best.

 

[xilolee]

Hey!

I read that page at the time and I was unsure if that feature can be activated only on secured-core pcs.

Examples of secured-core pcs: Windows 11 Secured-Core PCs | Microsoft

That's why I searched and found that script (on Microsoft website).

 

[Solitario]

Hi.
The problem is that I don't know how to use the script. I read the readme, but when I add the -Ready command, it just returns errors. Also, when I try to elevate to unrestricted PowerShell, I get an error.

 

[xilolee]

Hi.
The problem is that I don't know how to use the script. I read the readme, but when I add the -Ready command, it just returns errors. Also, when I try to elevate to unrestricted PowerShell, I get an error.

I don't know why it doesn't work, but it could be because it was written for Windows 10 and something could be changed in Windows 11...

 

[Naveena]

Hi Solitario, Yes, the Ryzen 5 3600 is compatible with the Firmware Protection Function (FPF). This feature was introduced with the Ryzen 3000 series processors and is designed to protect your BIOS or UEFI firmware from unauthorized changes.

To enable FPF, you will need to enter your BIOS or UEFI settings. The specific steps to do this will vary depending on your motherboard manufacturer and model. Once you are in the BIOS or UEFI settings, you should look for a setting called "Firmware Protection Function" or "FPF". Enable this setting and save your changes.