New
#31
@ddelo see post 26. I didn't ask about acpi. I asked about the bug!
thanks!
yes until now all ok. Did they respong to your bug report from feedback hub?
I'm checking the security status of a new HP laptop having a i5-8265U CPU under Windows 10 v1809. The security settings below are shown. I'm concerned about the False setting for BTIKernelRetpolineEnabled. Should this be enabled for my CPU and if so, how do you enable it? I did install the latest Intel microcode update and HP BIOS update. Are the other settings OK?
My PC currently has these values:
FeatureSettingsOverride =0
FeatureSettingsOverrideMask = 3
The security report shows:
BTIHardwarePresent : True
BTIWindowsSupportPresent : True
BTIWindowsSupportEnabled : True
BTIDisabledBySystemPolicy : False
BTIDisabledByNoHardwareSupport : False
BTIKernelRetpolineEnabled : False
BTIKernelImportOptimizationEnabled : True
KVAShadowRequired : False
KVAShadowWindowsSupportPresent : True
KVAShadowWindowsSupportEnabled : False
KVAShadowPcidEnabled : False
SSBDWindowsSupportPresent : True
SSBDHardwareVulnerable : True
SSBDHardwarePresent : True
SSBDWindowsSupportEnabledSystemWide : False
L1TFHardwareVulnerable : False
L1TFWindowsSupportPresent : True
L1TFWindowsSupportEnabled : False
L1TFInvalidPteBit : 0L1DFlushSupported : True
MDSWindowsSupportPresent : True
MDSHardwareVulnerable : False
MDSWindowsSupportEnabled : False
@Steve C
BTIKernelRetpolineEnabled : False
is absolutely OK as your CPU does not support Retpoline. See last paragraph of 1st post.
If you have updated your BIOS to the latest available from hp version (they're pretty good in keeping up with Intel's recommendations) then you're just fine. Verify it by running the powershell script in the 1sr post. Once your CPU microcode is the recommended by Intel one, the registry entries are not needed.