Mastodawn

Shawn Brink May 5, 2025

#VBSenclaves deprecated on #Windows11 23H2 and earlier, but still supported in 24H2. [Update May 2025] Existing enclaves signed with EKU 1.3.6.1.4.1.311.76.57.1.15 will continue to be supported for all Windows 11, version 23H2 and earlier.
https://www.elevenforum.com/t/vbs-enclaves-deprecated-on-windows-11-23h2-and-earlier-but-still-supported-in-24h2.35807/

VBS enclaves deprecated on Windows 11 23H2 and earlier, but still supported in 24H2

Deprecated Windows Features: FeatureDetails and mitigationDeprecation announced VBS enclaves for Windows 11, version 23H2 and earlierVBS enclaves are being deprecated on Windows 11, version 23H2 and earlier versions of Windows. Support for VBS enclaves will continue for Windows 11, version...

Windows 11 Forum

Shawn Brink Mar 3, 2025

Everything Old Is New Again: Hardening the Trust Boundary of #VBSEnclaves
https://www.elevenforum.com/t/everything-old-is-new-again-hardening-the-trust-boundary-of-vbs-enclaves.33940/

Everything Old Is New Again: Hardening the Trust Boundary of VBS Enclaves

Microsoft Security Blog: Virtualization-Based Security (VBS) enclaves use the hypervisor’s virtual trust levels (VTLs) to isolate regions of memory and code execution within a user-mode process. This provides a powerful solution for trusted execution environments (TEE) that protects sensitive...

Windows 11 Forum