6.7

2 Right-click the virtual machine and select Edit Settings.
3 Click the VM Options tab.
4 Check the Enable check box for Virtualization Based Security.
5 Click OK.
Confirm that the virtual machine's Summary tab displays "VBS true" in the Guest OS description.
What to do next
See Enable Virtualization-based Security on the Guest Operating System.
Enable Virtualization-based Security on the Guest Operating
System
You can enable Microsoft virtualization-based security (VBS) for supported Windows guest operating
systems.
You enable VBS from within the Windows Guest OS. Windows configures and enforces VBS through a
Group Policy Object (GPO). The GPO gives you the ability to turn off and on the various services, such as
Secure Boot, Device Guard, and Credential Guard, that VBS offers. Certain Windows versions also
require you to perform the additional step of enabling the Hyper-V platform.
See Microsoft's documentation about deploying Device Guard to enable virtualization-based security for
details.
Prerequisites
n
Ensure that virtualization-based security has been enabled on the virtual machine.
Procedure
1 In Microsoft Windows, edit the group policy to turn on VBS and choose other VBS-related security
options.
2 (Optional) For Microsoft Windows versions less than Redstone 4, in the Windows Features control
panel, enable the Hyper-V platform.
3 Reboot the guest operating system.
Disable Virtualization-based Security
If you no longer use virtualization-based security (VBS) with a virtual machine, you can disable VBS.
When you disable VBS for the virtual machine, the Windows VBS options remain unchanged but might
induce performance issues. Before disabling VBS on the virtual machine, disable VBS options within
Windows.
Prerequisites
Ensure that the virtual machine is powered off.
vSphere Virtual Machine Administration
VMware, Inc. 179