Turn On or Off Core Isolation Memory Integrity in Windows 10  

I made an error. Device manager>view>hidden drives>remove the old Western Digital ones and that fixed it. Threw the ancient drives away. I apologize for incorrect information. I did a clean install after anyway.

maranna said:

A clean install without the old drives installed did it.

For information . . .

 Disconnect ALL Other Disks

It is highly recommended that you disconnect [ temporarily unplug ] ALL other Disks [ HDD's/SSD's/USB's ] BEFORE installing Windows. The reasons for this are . . .

[1] You CAN'T accidentally OVERWRITE a connected Disk.
[2] The BOOTLOADER [ boot configuration files ] will get installed on the correct Disk [ because Windows has the tendency to install the bootloader rather randomly on ANY connected Disk ], and therefore STOP problems with booting once the installation is complete.

Once the installation is complete . . .

• Check the OS boots correctly.
• Check if the boot order in the BIOS/UEFI settings are correct [ if NOT, adjust them accordingly ].
• Reconnect the other Disks.

I hope this helps.

maranna said:

I do that and thank you to be sure.

You are VERY welcome.

@Brink What am I missing for Core Isolation/Firmware protection?

Kol12 said:

@Brink What am I missing for Core Isolation/Firmware protection?

Hello Matt,

Here's some info below on this to hopefully help.

Source: https://support.microsoft.com/en-us/...#hardwarescore

Hardware security capability

At the bottom of the Device security screen, one of the following messages appears, indicating the security capability of your device.

Your device meets the requirements for standard hardware security

This means your device supports memory integrity and core isolation and also has:

• TPM 2.0 (also referred to as your security processor)
• Secure boot enabled
• DEP
• UEFI MAT

Your device meets the requirements for enhanced hardware security

This means that in addition to meeting all the requirements of standard hardware security, your device also has memory integrity turned on.

Your device exceeds the requirements for enhanced hardware security (Note: In Windows 20H2 this message will say "Your device has all Secured-core PC features enabled")

This means that in addition to meeting all the requirements of enhanced hardware security, your device also has System Management Mode (SMM) protection turned on.

Standard hardware security not supported

This means that your device does not meet at least one of the requirements of standard hardware security.

Improving hardware security
If the security capability of your device isn't what you'd like it to be, you might need to turn on certain hardware features (such as secure boot, if supported) or change the settings in your system's BIOS. Contact your hardware manufacturer to see what features are supported by your hardware and how to activate them.

@Brink It appears my TPM is disabled. The TPM appears to be in a new location in the BIOS on my new motherboard.

Kol12 said:

@Brink It appears my TPM is disabled. The TPM appears to be in a new location in the BIOS on my new motherboard.

I'm glad you found the culprit.