Enable or not windows virtualization based security vmware?

[sandroalvesbras]

Hi friends,

in the version I found the option when creating a new machine.

I read about it, talks about security and features that windows 2016 onwards can offer.

But I ask you:

1- Should I set it as an option by default on all VMs that I create with Windows 2016/2019, even without using these security features at this time?

2 - If I choose not to enable, can I later be enabled?

3 - If I choose not to use, is there any security risk for VMs?

Thanks.

[sjesse]

You also need a kms server for the vbs setting to work, which some environments might not have.

https://www.vmware.com/resources/compatibility/pdf/vi_kms_guide.pdf

[Alex_Romeo]

Hi,

• Introducing support for Virtualization Based Security and Credential Guard in vSphere 6.7 - VMware vSphere Blog
• Virtualization-based Security Best Practices
• Securing Windows Guest Operating Systems with Virtualization-based Security

questions 1 and 2

1- Should I set it as an option by default on all VMs that I create with Windows 2016/2019, even without using these security features at this time?

2 - If I choose not to enable, can I later be enabled?

answer to questions 1 and 2

Enable Virtualization-based Security on an Existing Virtual Machine

questions 3

3 - If I choose not to use, is there any security risk for VMs?

answer to question 3

Securing Windows Guest Operating Systems with Virtualization-based Security

ARomeo